CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

368 matches found

Prion•added 2006/02/10 11:2 a.m.•17 views

Sql injection

SQL injection vulnerability in moderation.php in MyBB aka MyBulletinBoard 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter...

6.5CVSS8.7AI score0.01209EPSS

Exploits1References6Affected Software1

Cvelist•added 2006/02/10 11:0 a.m.•21 views

CVE-2006-0638

8AI score0.01209EPSS

Exploits1References6

Exploit DB•added 2006/02/07 12:0 a.m.•18 views

MyBB 1.0.3 - 'moderation.php' SQL Injection

source: https://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site, modify data...

7.4AI score

Exploits0

exploitpack•added 2006/02/07 12:0 a.m.•15 views

MyBB 1.0.3 - moderation.php SQL Injection

MyBB 1.0.3 - moderation.php SQL Injection source: https://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain...

0.1AI score

Exploits0

securityvulns•added 2006/02/03 12:0 a.m.•54 views

[Full-disclosure] phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin

Orginal Source: http://securityreason.com/achievementsecurityalert/31 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin Author: Maksymilian Arciemowicz cXIb8O3 Date: 3.2.2006 from SecurityReason.Com CVE-2006-0437 for the XSS issues CVE-2006-0438...

5CVSS5.7AI score0.02485EPSS

Exploits3

securityvulns•added 2003/12/30 12:0 a.m.•33 views

SQL Injection in phpBB's groupcp.php

BugTraq, I have found an SQL injection vulnerability in phpBB. Hoever, I don't think this is going to be be a wide spread problem as it will only work if you are the moderator of a group. How the SQL injection works: In groupscp, it uses an array set to delete members from certain groups. This...

0.5AI score

Exploits0