CVEvulnerability
CVE-2013-6936
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-12-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.
Affected configurations
• mybb ajax forum stat 2.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/100030 osvdb.org
- http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html Exploit
- http://seclists.org/bugtraq/2013/Nov/102 Exploit
- http://www.exploit-db.com/exploits/29797 Exploit
- http://www.iedb.ir/exploits-889.html www.iedb.ir
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89084 exchange.xforce.ibmcloud.com
- http://osvdb.org/100030 osvdb.org
- http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html Exploit
- http://seclists.org/bugtraq/2013/Nov/102 Exploit
- http://www.exploit-db.com/exploits/29797 Exploit
- http://www.iedb.ir/exploits-889.html www.iedb.ir
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89084 exchange.xforce.ibmcloud.com