EDB-37018

functional

MyBB 1.6.6 - 'index.php?conditions[usergroup][]' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor Aditya Modhapublished 2013-03-27catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2012-5909UShigh7.5Exploit
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergro…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan