CVE-2011-5278

HIGH · 7.5 CVSS Gepubliceerd: 08-04-2014 CWE-89

Beschrijving

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.

Vendors

Advanced Forum Signatures Project

Affected products

Advanced Forum Signatures

References

osvdb.org
secunia.com
www.exploit-db.com
www.securityfocus.com
exchange.xforce.ibmcloud.com