• info
• discussion
• exploit
• solution
• references

MyBB Transactions Plugin 'transaction' Parameter SQL Injection Vulnerability

An attacker can exploit this issue using a browser.

The following example URI is available:

http://www.example.com//bank.php?transactions=[SQLi]