CVE-2006-2336

CVE-2006-2336 describes an SQL injection in MyBB (MyBulletinBoard) 1.1.1 via the comma parameter in showthread.php, allowing remote command execution. The affected component is the showthread.php handler; the underlying issue is improper input handling that enables arbitrary SQL execution. Exploi...