[Madderc]

I happened to refresh the page while they were trying to troubleshoot the problem, but never really got to know very well what it was actually.

I'm still rather new at this as you can plainly see, but I would like to have some more info on this since it looks serious.

From what I gathered... it seems to be a program or an exploit of some sort... but I have no idea what it does or how it's used and all that.


I don't want you guys to tell me how to get it or use it, because I don't really need to and I also don't want it to fall in the wrong hands, but I also would like to know what it is and what it does.

Hope this question is appropriate, thanks.

[Anima Templi]

Well there have been a lot of "hype" around this. I have searched a little bit and I did not come across a place that actually validates the vulnerability. I have even seen MyBB staff members claiming that they haven't seen any proof of such vulnerability. But they are claiming that the vulnerability should rely in the file upload.

http://1337day.com/exploits/20380

[1llusion]

Well, one guy claims to have found a vulnerability in all MyBB versions. I don't really believe it as he didn't show any PoC. I've did a little background check on him and he doesn't really seem like a guy to find this kind of things. But because you never know, from the little information that is out there, we figured out a fix that should cripple the vulnerability so if it actually is true, an attacker won't be able to do anything.

[Madderc]

Thanks guys, either way I'm happy the forum is safe and that it was found rather quickly