Security Advisory
CVE-2011-5278
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin (aka afsignatures) 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afs_bar_right parameter.