Browse CVEs

HIGH 7.5 CVE-2006-0523 SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable. Mybulletinboard Patch available Fix from $1,9502006-02-02 MEDIUM 5.0 CVE-2006-0406 search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL … Mybulletinboard No fix yet Fix from $1,6002006-01-25 HIGH 7.5 CVE-2006-0219 The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files… Mybulletinboard Patch available Fix from $1,9502006-01-16 HIGH 10.0 CVE-2005-4200 Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities … Mybulletinboard Patch available Fix from $1,9502005-12-13 MEDIUM 5.0 CVE-2005-3777 MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form. Mybulletinboard Mitigation only Fix from $1,6002005-11-23 HIGH 7.5 CVE-2005-3326 SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday paramet… Mybulletinboard No fix yet Fix from $1,9502005-10-27 HIGH 7.5 CVE-2005-2778 SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter. Mybulletinboard No fix yet Fix from $1,9502005-09-02 HIGH 7.5 CVE-2005-2697 SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary … Mybulletinboard Mitigation only Fix from $1,9502005-08-26 HIGH 7.5 CVE-2005-2580 Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL command… Mybulletinboard Mitigation only Fix from $1,9502005-08-16 HIGH 7.5 CVE-2005-1833 Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid pa… Mybulletinboard after 1.00_rc4 Fix from $1,9502005-05-31 HIGH 7.5 CVE-2005-0282 SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter. Mybulletinboard No fix yet Fix from $1,9502005-05-02