PT-2009-1673 · Mybb · Mybb Custom Pages Plugin

Lidloses_Auge · Publicado 2009-02-20 · Atualizado 2025-09-26 · CVE-2008-6198

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB Custom Pages plugin version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the pages.php file of the Custom Pages plugin.

Recommendations For MyBB Custom Pages plugin version 1.0, consider disabling the pages.php file or restricting access to it until a patch is available to prevent exploitation. Avoid using the page parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-6198

Produtos afetados

Mybb Custom Pages Plugin

Referências · 5

• 🔥 https://exploit-db.com/exploits/5379 · Exploit
• 🔥 http://securityfocus.com/bid/28652 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41685 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6198 · Nota de Segurança
• https://t.me/cveNotify/136637 · Publicação no Telegram