EDB-35224

PoC

MyBB 1.8.x - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor smashpublished 2014-11-13catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-9241US	medium4.3	3.43% (89th)	Exploit	2014-12-03
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) type…
CVE-2014-9240US	high7.5	3.48% (89th)	Exploit	2014-12-03
SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the question_id parameter i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.