MyBB Community Forums

Full Version: Bug for mybb 1.6.3 ?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hello

I have a forum with more than 1100 members , and I got 2 messages from 2 different peoples that here is one bug at Avatar , they said me to inject from 5 and see it. Well , im not good with sql injction and can anyone try that ? , by the way can anyone tell me any serious bug for 1.6.3 ? (Please dont send me bug tracker link but tell me directly if any exists.)

Thanks
~ 3> MYBB Smile
There is no bug for this as far as I know. Although, if there is then we'll see a 1.6.4 version coming asap to fix this security issue.
I haven't seen any kind of sql injection point regarding the avatar system in 1.6 at all. Unless the people who have alerted you about this have POC (proof of concept), then there isn't any thing any one here can do.