New article by our researcher Aleksey Solovev: 'MyBB | Positive Development Community
New article by our researcher Aleksey Solovev: "MyBB <= 1.8.31: Remote Code Execution Chain".
Abusing Nested Parsers Conditions for getting XSS
From Privileged SQL Injection to RCE
Read the article: https://swarm.ptsecurity.com/mybb-1-8-31-remote-code-execution-chain/