iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
Search Temporary Disabled - Archived by Sh3llc0d3
  • Xin
    Posts: 3,251
    Due to security issues we have temporary disabled search. We will update you when we return it to normal.
    Xin
  • chroniccommand
    Posts: 1,389
    What security issues? Is it with myBB?
  • Sh3llc0d3
    Posts: 1,910
    The following are also affected:

    - View Your Threads
    - View New Posts
    - View Today's Posts
    - View Unread Posts

    And chronic yes it is MyBB. I suggest checking it out if your forum uses MyBB.
  • chroniccommand
    Posts: 1,389
    said:


    The following are also affected:

    - View Your Threads
    - View New Posts
    - View Today's Posts
    - View Unread Posts

    And chronic yes it is MyBB. I suggest checking it out if your forum uses MyBB.



    Tried googling. Is it the myBB 1.6.2 SQLi ?
  • Sh3llc0d3
    Posts: 1,910
    I got a result on it the first google search I think. PM'd you the link as it's not letting me access the blog that mentions it.
  • chroniccommand
    Posts: 1,389
    said:


    I got a result on it the first google search I think. PM'd you the link as it's not letting me access the blog that mentions it.



    Ah I see. I accessed via cache and saw it. Heh pretty cool. Any idea when myBB is going to release a fix? Until now I'll try and patch it myself.
  • chroniccommand
    Posts: 1,389
    I think it's safe to turn search back on.
    http://community.mybb.com/thread-91668.html
  • Sh3llc0d3
    Posts: 1,910
    Basically they're saying it's vulnerable they just haven't found anyone who can manipulate the vuln to release info.
  • chroniccommand
    Posts: 1,389
    said:


    Basically they're saying it's vulnerable they just haven't found anyone who can manipulate the vuln to release info.



    I think it's pretty much safe it seems almost impossible to actually exploit.
  • George
    Posts: 707
    It has been confirmed by a development team member of MyBB that the issue will be fixed in 1.6.3 and that it's not a huge problem for now as no one was able to provide proof that it's dangerous.

    I'll keep this topic open for now, so we're able to update you on the situation.
Add a Comment