CVE-2021-27890_MyBB後台論壇主題管理SQL注入漏洞_en

# CVE-2021-27890 MyBB後台論壇主題管理SQL注入漏洞/en

==Affected Versions==

< 1.8.26

==Exploit==

Import the constructed malicious xml in the backend theme manager

-2' or sleep(0.01) or '

==Affected Versions==

< 1.8.26

==Exploit==

Import the constructed malicious xml in the backend theme manager

-2' or sleep(0.01) or '

Click "Duplicate Theme", then capture the traffic, successfully implemented delayed injection (the injection will also exist in the export function)