CVE-2013-6936

no score yetEPSS 2.5%

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2013-12-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mybb:ajax_forum_stat

References

http://osvdb.org/100030
http://packetstormsecurity.com/files/124091/MyBB-Ajaxfs-SQL-Injection.html
http://seclists.org/bugtraq/2013/Nov/102
http://www.exploit-db.com/exploits/29797
http://www.iedb.ir/exploits-889.html

Check your stack JSON