writeups.xyz / MyBB 0day Authenticated Remote code execution

Submitter : c2a

Date: 19 July 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Argument Injection

Programs :

• MyBB

Authors :

• Anna / 416e6e61 (@AnnaViolet20)

Link :
https://0x1337.ninja/2022/07/19/mybb-0day-authenticated-remote-code-execution/