CVE-2013-6936

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.48% chance of exploitation in the next 30 days, 83th percentile

Published

2013-12-04

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/29797

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29797

References

• CVE Record
• NVD entry

Related

• CVE-2013-6935
• CVE-2013-6937
• CVE-2013-6934
• CVE-2013-6955
• CVE-2013-6924
• CVE-2013-6976