PT-2011-4997 · Mybb · Mybb Forum Userbar Plugin

Publicado 2011-11-29 · Atualizado 2017-08-29 · CVE-2011-4569

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB Forum Userbar plugin version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the image2 parameter in the userbarsettings.php file.

Recommendations For MyBB Forum Userbar plugin version 2.2, avoid using the image2 parameter in the userbarsettings.php file until a patch is available. Restrict access to the userbarsettings.php file to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-4569

Produtos afetados

Mybb Forum Userbar Plugin

Referências · 5

• 🔥 http://exploit-db.com/exploits/17962 · Exploit
• 🔥 https://exploit-db.com/exploits/17962 · Exploit
• 🔥 http://securityfocus.com/bid/50049 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70474 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4569 · Nota de Segurança