7.5

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter.

Data is provided by the National Vulnerability Database (NVD)
MybulletinboardMybulletinboard Version1.0.1
MybulletinboardMybulletinboard Version1.0.2
MybulletinboardMybulletinboard Version1.0.3
MybulletinboardMybulletinboard Version1.0_final
MybulletinboardMybulletinboard Version1.0_pr2
MybulletinboardMybulletinboard Version1.0_preview_release_2
MybulletinboardMybulletinboard Version1.0_rc2
MybulletinboardMybulletinboard Version1.0_rc4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.45% 0.609
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P