PT-2011-4997 · Mybb · Mybb Forum Userbar Plugin

Published 2011-11-29 · Updated 2017-08-29 · CVE-2011-4569

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB Forum Userbar plugin version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the image2 parameter in the userbarsettings.php file.

Recommendations For MyBB Forum Userbar plugin version 2.2, avoid using the image2 parameter in the userbarsettings.php file until a patch is available. Restrict access to the userbarsettings.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-4569

Affected Products

Mybb Forum Userbar Plugin

References · 5

• 🔥 http://exploit-db.com/exploits/17962 · Exploit
• 🔥 https://exploit-db.com/exploits/17962 · Exploit
• 🔥 http://securityfocus.com/bid/50049 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4569 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70474 · Note