CVE-2013-6936

ALTO 7.5CVE-2013-6936 · Published 04/12/2013 · updated 17/06/2026

En resumen

CVE-2013-6936 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a ajax forum stat (mybb).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.5%, mayor que el 84.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
ajax forum stat mybb	`= 2.0`	No fix yet

Description

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.

References

osvdb.org/100030
packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html · Exploit
seclists.org/bugtraq/2013/Nov/102 · Exploit
exploit-db.com/exploits/29797 · Exploit
iedb.ir/exploits-889.html
exchange.xforce.ibmcloud.com/vulnerabilities/89084

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free