pentester.land· Jan 25, 2023· by Aleksey Solovev

MyBB <= 1.8.31: Remote Code Execution Chain

Open Original Article ↗
Target Program: MyBB
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#SQL injection#Stored XSS

More Writeups Like This

pentester.land

Exploiting authorization by nonce in WordPress plugins

by Bartek Nowotarski
pentester.land

SSD Advisory – SonicWall SMA100 Stored XSS To RCE

by SeongJoon Cho
pentester.land

From a GLPI patch bypass to RCE

by Guilhem Rioux (@GuilhemRioux)
pentester.land

Hacking Apple - SQL Injection to Remote Code Execution

by Harsh Jaiswal (@rootxharsh), Rahul Maini (@iamnoooob)