76295vdb entry
http://osvdb.org/76295 CVE-2011-5278
MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection
Record summary
CVE-2011-5278 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL InjectionExploitDB exploitby Mario_VsNot analyzed1 file
References
646352Third-party advisory
http://secunia.com/advisories/46352 17961exploit
http://www.exploit-db.com/exploits/17961 50051vdb entry
http://www.securityfocus.com/bid/50051/info mybbafs-signature-sql-injection(70473)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/70473 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-5278