EDB-49696

PoC

MyBB 1.8.25 - Chained Remote Command Execution

view exploit source exploit_dbtype webappsauthor SivertPLpublished 2021-03-22catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-27890US	high8.8	10.7% (96th)	Exploit	2021-03-15
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.
CVE-2021-27889US	medium6.1	5.07% (92nd)	Exploit	2021-03-15
Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.