CVE-2008-3965

SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...

CVE-2008-3965

MyBB (aka MyBulletinBoard) before 1.4.1 contains an SQL injection in misc.php via a certain editor field, allowing remote attackers to execute arbitrary SQL commands. The issue affects MyBB versions up to 1.4.1; upgrading to 1.4.1 or newer is the documented remediation. No exploitation details or...