imei Addmimistrator’s BugBlog

——————–Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.2 updated
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level:low
—————–Description—————
Mybb has a security bug that allows hackers run unwanted scripts into client’s browser that well known as XSS cross site scripting attack.
bug is in result of poor cheknig of two input varibles “sortby” & “sortordr” in redirection page of […]

MyBB, Forum Software | 1 Comment »

——————–Summary—————-
Software: BlogPHP
Sowtware’s Web Site: http://www.blogphp.net/
Versions: 1(2)
Type: SQL Injection
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Not Available
Discovered by: imei
—————–Description—————
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.3
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: high
—————–Description—————
There is some security bug in BlogPHP 1(2) software that allows attacker performe an SQLINJECTION attack. bug is in result of poor checking for quotations in […]

WeblogSoftwares | No Comments »

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://mybboard.com
Versions: 1.0.2
Class: Remote
Status: patched in 1.0.3
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk: low
—————–Description—————
mybb has a security bug that allows hacker to know that what is the table perfix value in database also can perform a XSS attack.
bug is in result of leaving some unneeded codes in search.php file.
————–Exploit———————-
go to this url in […]

MyBB, Forum Software | No Comments »

—————–Summery—————
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.2 latest version
Class: Remote
Status: Unpatched
Exploit: Not Available
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level:high
—————–Description—————
Mybb has a security bug that allows hackers run SQLINJECTION
bug is in usercp.php line 830 that Allows SQL Injection and can result to full access to admin cp.
bug is in result of poor checking of $mybb->input[’threadmode’] […]

MyBB, Forum Software | 1 Comment »