imei Addmimistrator’s BugBlog

——————–Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level:low
—————–Description—————
Mybb has a security bug that allows hackers run unwanted scripts into client’s browser that well known as XSS cross site scripting
this bug is in result of poor checking htmlspecialchars in printthread.php view of a topic and can exploit without […]

MyBB, Forum Software | 1 Comment »

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.1
Class: Remote
Status: Unpatched
Exploit: Not Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level:high
—————–Description—————
there is a security bug in inc/function_upload.php script in mybb all version (except two days ago security updated version) that allows SQL INJECTION
this bug is in function of upload attachment .
when a file goes to upload this […]

MyBB, Forum Software | 1 Comment »

——————–Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.0 Gold
Class: Remote
Status: patched after reporte to vendor in version 1.0.1
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: high
—————–Description—————
Mybb has a security hole in /admin/global.php that allows SQL INJECTION…
a successful exploit can easily result to bypassing admin authentication and also other attacks that based on SQL INJECT available.
bug is in […]

MyBB, Forum Software | 1 Comment »