Lucene search
HistoryJul 24, 2006 - 12:19 p.m.
CVE-2006-3775
cve-2006-3775
sql injection
mybb
mybulletinboard
security vulnerability
remote code execution
nvd
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.4%
SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER[‘HTTP_CLIENT_IP’] variable), as utilized by index.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mybulletinboard:mybulletinboard | mybulletinboard | eq | 1.1.5 |
Related
nessus
nessus
MyBB HTTP Header 'CLIENT-IP' Field SQLi
2006-07-17 00:00:00
cvelist
cvelist
CVE-2006-3775
2006-07-21 18:00:00
CVE-2007-1963
2007-04-11 10:00:00
cve
cve
CVE-2007-1963
2007-04-11 10:19:00
prion
prion
Sql injection
2007-04-11 10:19:00
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2006-3775