high8.8Public exploit code
CVE-2021-27946
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBB 1.8.25 - Poll Vote Count SQL Injection2021-03-23 · webapps · php
Impact
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Mybb | before 1.8.26 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html
- https://github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p
- http://packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html
- https://github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p