EUVD-2006-2905

Malware in sbrugna...

CVE-2006-2908

The CVE-2006-2908 issue affects MyBB 1.1.2 (and possibly other versions) where the function domecode in inc/functions_post.php uses the user-supplied username in a preg_replace with the /e modifier, allowing remote attackers to execute arbitrary PHP code. The vulnerability enables code execution ...

CVE-2006-2908: Undefined Security Weakness

The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...