CVE-2006-0959

This exploit targets a SQL injection vulnerability in MyBB <= 1.04 via the 'misc.php' script. It injects a malicious SQL query through the 'comma' cookie parameter to extract the login key of a specified user.

This exploit demonstrates a SQL injection vulnerability in MyBB 1.3 when register_globals is enabled. The attack leverages an unset $_COOKIE variable to inject malicious SQL via the 'comma' cookie, bypassing authentication and extracting sensitive data.