CVE-2005-4602

Impact

SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18281
• http://securityreason.com/securityalert/311
• http://www.osvdb.org/22159
• http://www.securityfocus.com/archive/1/420573/100/0/threaded
• http://www.securityfocus.com/bid/16097
• http://www.vupen.com/english/advisories/2006/0012
• http://secunia.com/advisories/18281
• http://securityreason.com/securityalert/311
• http://www.osvdb.org/22159
• http://www.securityfocus.com/archive/1/420573/100/0/threaded
• http://www.securityfocus.com/bid/16097
• http://www.vupen.com/english/advisories/2006/0012