writeups.xyz / MyBB <= 1.8.31: Remote Code Execution Chain

Submitter : c2a

Date: 25 January 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• SQL Injection
• Stored XSS

Programs :

• MyBB

Authors :

• Aleksey Solovev

Link :
https://swarm.ptsecurity.com/mybb-1-8-31-remote-code-execution-chain/