Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
MyTabs - Direct Initialization Missing
#1
Hey guys,

I was helping a member of mybb community forums after recovering from a hack when they said to me that they heard the MyTabs plugin was vulnerable. I had a look and noticed that it could be initialized directly out of mybb. Not sure if this was the cause of his hack, but it's certainly not something that should be missing.

I've attached a copy of the mytabs plugin which prevents direct initialization, I don't know if anyone has already mentioned about this, but if not, here you go Smile

Cheers guys Smile


Attached Files
.php   mytabs.php (Size: 16.64 KB / Downloads: 73)
[Image: information.gif] MyBB Support Technician
Please do not PM me for support.


MyBBatically - A quick and easy way to update your board!
#2
The vulnerability in MyTabs was already fixed. That's merely a security measure, it doesn't fix any vulnerability.
No longer involved in the MyBB project.
#3
Ok, Thanks Nathan. I've edited the thread title more suitably Smile
[Image: information.gif] MyBB Support Technician
Please do not PM me for support.


MyBBatically - A quick and easy way to update your board!


Forum Jump:


Users browsing this thread: 1 Guest(s)