CVE-2013-6936 | BDVDB-2026-58679 Detail

Description#

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/100030
http://www.exploit-db.com/exploits/29797
http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html
http://www.iedb.ir/exploits-889.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/89084
http://seclists.org/bugtraq/2013/Nov/102

Exploit#

http://www.exploit-db.com/exploits/29797

History#

Version 12013-12-04Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.