Posts Tagged ‘Follower User Plugin’

Vulnerability

SQL-injection in MyBB

Vulnerability: SQL-injection in MyBB Follower User Plugin

Danger: High
Quantity of vulnerabilities: 1
Impact: Unauthorized change

Exploit: PoC code
Affected products: Follower User 1.x (plugin for MyBB)

Affected versions: MyBB Follower User Plugin 1.5, maybe earlier

Description:

The vulnerability allows a remote user to execute arbitrary SQL commands in the application database. (more…)