high7.5
CVE-2005-2888
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid par…
Impact
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112611068702781&w=2
- http://secunia.com/advisories/16738/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22192
- http://marc.info/?l=bugtraq&m=112611068702781&w=2
- http://secunia.com/advisories/16738/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22192