Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2230. PoCs published by The:Paradox.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in MyBB <= 1.4.4, allowing an authenticated user to escalate privileges to admin and achieve remote code execution by backdooring a theme file. The exploit automates login, privilege escalation, and backdoor placement.
Description
SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in MyBB <= 1.4.4, allowing an authenticated user to escalate privileges to admin and achieve remote code execution by backdooring a theme file. The exploit automates login, privilege escalation, and backdoor placement.