Mybulletinboard

Mybulletinboard

60 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2006-0638

Exploit
  • EPSS 0.82%
  • Published 10.02.2006 11:02:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter.

7.5

CVE-2006-0523

  • EPSS 0.62%
  • Published 02.02.2006 11:02:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.

4.3

CVE-2006-0495

  • EPSS 0.34%
  • Published 01.02.2006 02:02:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).

4.3

CVE-2006-0494

  • EPSS 0.04%
  • Published 01.02.2006 02:02:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugi...

4.3

CVE-2006-0470

Exploit
  • EPSS 1.25%
  • Published 31.01.2006 11:03:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection.

5

CVE-2006-0406

Exploit
  • EPSS 0.48%
  • Published 25.01.2006 02:03:00
  • Last modified 03.04.2025 01:03:51

search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.

4.3

CVE-2006-0364

Exploit
  • EPSS 0.67%
  • Published 22.01.2006 20:03:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric c...

7.5

CVE-2006-0219

  • EPSS 0.38%
  • Published 16.01.2006 21:03:00
  • Last modified 03.04.2025 01:03:51

The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not prop...

4.3

CVE-2005-4603

  • EPSS 0.53%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.

10

CVE-2005-4200

  • EPSS 0.49%
  • Published 13.12.2005 11:03:00
  • Last modified 03.04.2025 01:03:51

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199.