imei Addmimistrator’s BugBlog

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.1.0
Class: Remote
Status: Unpatched
Exploit: Private
Solution: Not Available
Discovered by: imei addmimistrator
Risk Level: medume
—————–Description—————
There is a security bug in MyBB 1.1.0 software (latest version fully patched) that allows attacker performe a XSS cross site scripting attack.bug is in phrasing [IMG] & [EMAIL] code process and that is in result of poor checking quotations […]

MyBB, Forum Software | 7 Comments »

——————-Summary—————-
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.4
Class: Remote
Status: Unpatched
Exploit: Available
Discovered by: imei addmimistrator
Risk Level: medium
—————–Description—————
There is a security bug in MyBB 1.0.4 software (latest version fully patched) that allows attacker performe an XSS attack. bug is in result of leaving some unneeded codes or some codes that have not any field for entry but are available […]

MyBB, Forum Software | 2 Comments »

——–Summary——–
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.4
Class: Remote
Status: Unpatched
Exploit: Not Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: high
——-Description——-
There are some security bugs in MyBB software that allows attacker to perform a HeaderInjection attack.MyBB is prone to Header injection in “many pages” in result of unsentized CRLFs and other meaningfull characters in embeding usersuplied varables in header of […]

MyBB, Forum Software | No Comments »

——–Summary——–
Software: MyBB
Sowtware’s Web Site: http://www.mybboard.com
Versions: 1.0.4
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: high
——-Description——-
There is a security bug in MyBB 1.0.4 software (latest version fully patched) that allows attacker performe an XSS attack. bug is in result of unsentizing quotation and < & > characters for “url“parameter.
Bug is in member.php file while redirecting after […]

MyBB, Forum Software | 2 Comments »