MyBB Code Injection Vulnerability
Loading...
Loading...
1,905
Loading...
Uploaded by r1dv4n on Dec 21, 2010
MyBB LFI Vuln. described. Please don't use for bad ideas. It just for educational purpose.
Rıdvan KARATAŞ (r1dv4n@gmail.com)
Certified Ethical Hacker
![MyBB 1.6.4 Backdoor Tutorial by The UnKnØwN .:[The Cr4zY3D Team]:.](//s.ytimg.com/yt/img/pixel-vfl3z5WfW.gif)
3:41
MyBB 1.6.4 Backdoor Tutorial by The UnKnØwN .:[The Cr4zY3D Team]:.by UnKnOwNCrazy3D1,009 views- 3:43
Cookie Modification + MyBB Lockout Bypassby techforumstuts1,034 views
- 1:51
Hack Forums Exploitby EliteGeek91919 views
- 7:42
Hack compte msn et forum mybb by Dr.C0rt3xby DrCrypt0x614 views
- 3:02
How To hack Mybb [Metasploit]by Rt33nAlb0zZTeam496 views
- 5:13
MyBB Tutorials - Securityby StringTutorials231 views
- 1:33
sql injection(100% working)by jonesrulz29,410 views
- 9:45
How To Install a MyBB Forum onto Your Website! **Clear Voice!**by xNicksTuts4You24,949 views
- 2:52
MyBB Lockout Bypassby iExploitTube258 views
- 9:44
Mybb Video Gallery Plugin Exploitby CyberHackersOrg325 views
- 9:55
Erstellen eines kostenlosen Forumsby JeanLuc198111,925 views
- 1:48
Index counter strike v2by KrYsSuTaw696 views
- 5:39
code injection [2/2]by xenopusRTRT1,024 views
- 1:35
la mort de Ralliceby torpen8835,950 views
- 8:58
SQL Injection upload PHP Shell via Mysqlby lKurapiKo3,344 views
- 1:06
Mozart opéra rock 3 janvier 2010 derniere représentation si je défaille ...by sushi200324,786 views
- 14:31
Tutorial: How to Install MyBB Forum Softwareby Hovercat34430 views
- 4:50
Cracking Cpanel's [TUT]by LiquidSecurityNet9,554 views
- 2:28
ZAPPING 1 des gags lors de la dernière à Paris le 09.01.2011 Mozart opera rockby jmnels137,127 views
then, what should I type into the textfield?
i tried this:
none'; update mybb_users set usergroup=4 where uid=1212 or '
this doesn't work, it's blocked by something like @burakbozyigit said (addslashes()) =))
TaiAnjingLu 2 months ago
@TaiAnjingLu as I introduced I share this vul. because of educational purposes. I couldn't show what you should type into textfield. and yes it works at 1.4.4 and 1.4.6 versions
r1dv4n 2 months ago
merhaba burakbozyigit,
açığın temeli addslashesden değil mysql_real_escape_sctrings(); kullanılmadığından. konu da benimle değil MyBB forum sistemiyle alakalı. ben duyacağımı da bileceğimi de biliyorum merak etmeyin :)
r1dv4n 10 months ago