CVE-2013-6936: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat Ajaxfs Plugin 2.0 for MyBB aka MyBulletinBoard allow remote attackers to execute arbitrary SQL commands via the 1 tooltip or 2 usertooltip parameter...

PT-2013-6194

Name of the Vulnerable Software and Affected Versions MyBB Ajaxfs Plugin version 2.0 Description The issue concerns SQL injection vulnerabilities in the ajaxfs.php file of the Ajax forum stat Plugin for MyBB. Remote attackers can execute arbitrary SQL commands by manipulating the tooltip or...