high7.5Public exploit code
CVE-2011-5278
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection2011-10-10 · webapps · php · Verified
Impact
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advanced Forum Signatures Project | Advanced Forum Signatures | Version 2.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/76295
- http://secunia.com/advisories/46352
- http://www.exploit-db.com/exploits/17961
- http://www.securityfocus.com/bid/50051/info
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70473
- http://osvdb.org/76295
- http://secunia.com/advisories/46352
- http://www.exploit-db.com/exploits/17961
- http://www.securityfocus.com/bid/50051/info
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70473