CVE-2011-10018
CRITICALmyBB 1.6.4 - Unauthenticated Remote Code Execution via Collapsed Cookie Backdoor
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-10018.
PoCs published by Metasploit, tdz, including Metasploit module exploits/unix/webapp/mybb_backdoor.
AI-analyzed exploit summary This exploit targets a backdoor in myBB 1.6.4, where a maliciously crafted cookie can execute arbitrary PHP code. The payload is encoded and sent via the 'collapsed' cookie parameter.
Description
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduced during packaging and was not part of the intended application logic. Exploitation requires no authentication and results in full compromise of the web server under the context of the web application.
Exploits (2)
This exploit targets a backdoor in myBB 1.6.4, where a maliciously crafted cookie can execute arbitrary PHP code. The payload is encoded and sent via the 'collapsed' cookie parameter.
This Metasploit module exploits a backdoor in myBB 1.6.4 by injecting arbitrary PHP code via a maliciously crafted cookie. The payload is executed when the server processes the cookie, leading to remote command execution.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H