high7.5
CVE-2006-3243
SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcod…
Impact
SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybulletinboard | Mybulletinboard | Versions 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0_final, 1.0_pr2 |
References
- NVD record
- CVE.org record
- http://community.mybboard.net/showthread.php?tid=9955
- http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html
- http://secunia.com/advisories/20795
- http://securityreason.com/securityalert/1147
- http://www.securityfocus.com/archive/1/438209
- http://www.vupen.com/english/advisories/2006/2511
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27410
- http://community.mybboard.net/showthread.php?tid=9955
- http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html
- http://secunia.com/advisories/20795
- http://securityreason.com/securityalert/1147
- http://www.securityfocus.com/archive/1/438209
- http://www.vupen.com/english/advisories/2006/2511
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27410