[VIM] MyBB search.php XSS: "sortordr" or "sorder" ? and vendor ACK

[security curmudgeon]

: There also appears to be an SQL-injection related fix in global.php, but 
: I'm not sure where it came from - possibly a zero-day exploit.

http://community.mybboard.net/showthread.php?tid=6418

  As some of you saw, when these forums were attacked, there has been the 
  discovery of another serious security exploit in MyBB.

  Soon after the boards were exploited, backups of the forum were restored 
  and the discovery process began. Due to access logs being completely 
  useless (Corrupt), I took to the code and found the potential 
  vulnerability the attacker exploited.


Interesting, the MyBB admins disclosed the attacker info:

Username: dedo (They previously registered here)
Email Address: o.y.6 at hotmail.com
IP Address: 88.152.35.15


That email address corresponds with two Bugtraq posts:

  http://archives.neohapsis.com/archives/bugtraq/2006-01/0482.html
  MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS )

  http://archives.neohapsis.com/archives/bugtraq/2006-01/0492.html
  MyBB 1.2 Local File Incusion

So it seems these may be two of the "several other medium priority 
vulnerabilities recently discovered".