[email protected]CVE-2008-0787

HistoryFeb 15, 2008 - 1:00 a.m.

CVE-2008-0787

2008-02-1501:00:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2008-0787

mybb

sql injection

security vulnerability

nvd

8.8 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.7%

JSON

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php.

CPENameOperatorVersion
mybulletinboard:mybulletinboardmybulletinboardeq1.10
mybulletinboard:mybulletinboardmybulletinboardeq1.1.1
mybulletinboard:mybulletinboardmybulletinboardeq1.2.3
mybulletinboard:mybulletinboardmybulletinboardeq1.0
mybulletinboard:mybulletinboardmybulletinboardeqrc3
mybulletinboard:mybulletinboardmybulletinboardeq1.1.8
mybulletinboard:mybulletinboardmybulletinboardeq1.2
mybulletinboard:mybulletinboardmybulletinboardeq1.2.5
mybulletinboard:mybulletinboardmybulletinboardeq1.1.6
mybulletinboard:mybulletinboardmybulletinboardeq1.1.3

CPE	Name	Operator	Version
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.10
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.1.1
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.2.3
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.0
mybulletinboard:mybulletinboard	mybulletinboard	eq	rc3
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.1.8
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.2
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.2.5
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.1.6
mybulletinboard:mybulletinboard	mybulletinboard	eq	1.1.3

Rows per page:

1-10 of 251

References

community.mybboard.net/showthread.php?tid=27675

secunia.com/advisories/28572/

www.securityfocus.com/archive/1/486763/100/200/threaded

www.securityfocus.com/bid/27378

www.securitytracker.com/id?1019257

www.vupen.com/english/advisories/2008/0238

www.waraxe.us/advisory-64.html

www.exploit-db.com/exploits/5070

8.8 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.7%

JSON

Related for CVE-2008-0787

prion1 cvelist1