CVE-2011-5277
Advanced Forum Signatures 2.0.4 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5277. PoCs published by Mario_Vs.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MyBB Advanced Forum Signatures plugin (afsignatures-2.0.4). The attack injects malicious SQL into the POST request to manipulate user data, specifically targeting the 'password' and 'salt' fields for user 'uid=1'.
Description
Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the (1) afs_type, (2) afs_background, (3) afs_showonline, (4) afs_bar_left, (5) afs_bar_center, (6) afs_full_line1, (7) afs_full_line2, (8) afs_full_line3, (9) afs_full_line4, (10) afs_full_line5, or (11) afs_full_line6 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in MyBB Advanced Forum Signatures plugin (afsignatures-2.0.4). The attack injects malicious SQL into the POST request to manipulate user data, specifically targeting the 'password' and 'salt' fields for user 'uid=1'.