NVD

Id
41783  
Name
CVE-2013-6936  
Description
Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-04  
Modified Date
2014-02-25  
Seq
2013-6936  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
211100 41783 CVE-2013-6936 http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html  View
211101 41783 CVE-2013-6936 20131120 Mybb Ajaxfs Plugin Sql Injection vulnerability  View
211102 41783 CVE-2013-6936 29797  View
211103 41783 CVE-2013-6936 http://www.iedb.ir/exploits-889.html  View
211104 41783 CVE-2013-6936 mybb-ajaxfs-sql-injection(89084)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23778 JVNDB-2013-005353 MyBB 用 Ajax forum stat プラグインの ajaxfs.php における SQL インジェクションの脆弱性 MyBB (別名 MyBulletinBoard) 用 Ajax forum stat (Ajaxfs) プラグインの ajaxfs.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-6936 66878 CVE-2013-6936 41783 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005353.html 2013-11-20 2013-12-06 View