high7.5
CVE-2006-0523
SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.
Impact
SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybulletinboard | Mybulletinboard | Versions 1.0.1, 1.0.2, 1.0_final, 1.0_pr2, 1.0_preview_release_2, 1.0_rc2 |
References
- NVD record
- CVE.org record
- http://community.mybboard.net/showthread.php?tid=6418
- http://secunia.com/advisories/18678
- http://www.osvdb.org/22903
- http://www.vupen.com/english/advisories/2006/0400
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24416
- http://community.mybboard.net/showthread.php?tid=6418
- http://secunia.com/advisories/18678
- http://www.osvdb.org/22903
- http://www.vupen.com/english/advisories/2006/0400
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24416