CVE-2011-5278

High

Published: 08/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The Advanced Forum Signatures plugin version 2.0.4 for MyBB contains an SQL injection vulnerability in signature.php, allowing remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.

Risk Assessment

This vulnerability could lead to unauthorized access to the database and leakage of sensitive information, posing a serious threat to organizational security.

Recommendation

It is recommended to update the plugin to the latest version and conduct a security audit of the application to minimize risk.

Other vulnerabilities in Advanced Forum Signatures plugin 2.0.4 for MyBB

CVE-2011-5277High
The Advanced Forum Signatures plugin version 2.0.4 for MyBB contains multiple SQL injection vulnerabilities in the signature.php file. Remote attackers can execute arbitrary SQL commands through various parameters.

Original NVD description (English source)

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.