CVE-2008-0382

This exploit targets a command injection vulnerability in MyBB <= 1.2.10 by manipulating the 'sortby' parameter in forumdisplay.php. It constructs a malicious HTTP GET request to execute arbitrary commands on the server.

This exploit demonstrates remote code execution in MyBB 1.2.10 via unsanitized input in the 'sortby' parameter, which is passed to an eval() function in both 'forumdisplay.php' and 'search.php'. Attackers can inject arbitrary PHP code to execute system commands or read sensitive files.