Lucene search

K
cve[email protected]CVE-2006-0523
HistoryFeb 02, 2006 - 11:02 a.m.

CVE-2006-0523

2006-02-0211:02:00
web.nvd.nist.gov
18
mybb
sql injection
vulnerability
global.php
nvd

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.4%

SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.

Affected configurations

NVD
Node
mybulletinboardmybulletinboardMatch1.0.1
OR
mybulletinboardmybulletinboardMatch1.0.2
OR
mybulletinboardmybulletinboardMatch1.0_final
OR
mybulletinboardmybulletinboardMatch1.0_pr2
OR
mybulletinboardmybulletinboardMatch1.0_preview_release_2
OR
mybulletinboardmybulletinboardMatch1.0_rc2
OR
mybulletinboardmybulletinboardMatch1.0_rc4

8.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.4%

Related for CVE-2006-0523