7.5

CVE-2006-3243

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.

Data is provided by the National Vulnerability Database (NVD)
MybulletinboardMybulletinboard Version1.0.1
MybulletinboardMybulletinboard Version1.0.2
MybulletinboardMybulletinboard Version1.0.3
MybulletinboardMybulletinboard Version1.0.4
MybulletinboardMybulletinboard Version1.0_final
MybulletinboardMybulletinboard Version1.0_pr2
MybulletinboardMybulletinboard Version1.0_preview_release_2
MybulletinboardMybulletinboard Version1.00_rc1
MybulletinboardMybulletinboard Version1.00_rc2
MybulletinboardMybulletinboard Version1.0_rc2
MybulletinboardMybulletinboard Version1.00_rc3
MybulletinboardMybulletinboard Version1.0_rc4
MybulletinboardMybulletinboard Version1.00_rc4
MybulletinboardMybulletinboard Version1.00_rc4_security_patch
MybulletinboardMybulletinboard Version1.1.1
MybulletinboardMybulletinboard Version1.1.2
MybulletinboardMybulletinboard Version1.1.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.82% 0.733
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P