CVE-2006-2589: Undefined Security Weakness

SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...

CVE-2006-2336

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2336: Undefined Security Weakness

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-0959: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in misc.php in MyBulletinBoard MyBB 1.03, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie. NOTE: 1.04 has also been reported to be affected...

CVE-2005-0429: Undefined Security Weakness

Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter...