CVE-2011-5277

High

Published: 08/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The Advanced Forum Signatures plugin version 2.0.4 for MyBB contains multiple SQL injection vulnerabilities in the signature.php file. Remote attackers can execute arbitrary SQL commands through various parameters.

Risk Assessment

These vulnerabilities may lead to unauthorized access to the database and potential data loss. Organizations should be aware of the risks associated with using this plugin.

Recommendation

It is recommended to update the plugin to the latest version or deactivate it to minimize the risk of attacks. A security audit of the application should also be conducted.

Other vulnerabilities in Advanced Forum Signatures plugin 2.0.4 for MyBB

CVE-2011-5278High
The Advanced Forum Signatures plugin version 2.0.4 for MyBB contains an SQL injection vulnerability in signature.php, allowing remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures (aka afsignatures) plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the (1) afs_type, (2) afs_background, (3) afs_showonline, (4) afs_bar_left, (5) afs_bar_center, (6) afs_full_line1, (7) afs_full_line2, (8) afs_full_line3, (9) afs_full_line4, (10) afs_full_line5, or (11) afs_full_line6 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.