CVE-2011-5278
Advanced Forum Signatures 2.0.4 - SQL Injection via afs_bar_right Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5278. PoCs published by Mario_Vs.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in MyBB Advanced Forum Signatures plugin (afsignatures-2.0.4). The attack injects malicious SQL into the POST request to manipulate user data, specifically targeting the 'password' and 'salt' fields for user 'uid=1'.
Description
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in MyBB Advanced Forum Signatures plugin (afsignatures-2.0.4). The attack injects malicious SQL into the POST request to manipulate user data, specifically targeting the 'password' and 'salt' fields for user 'uid=1'.