CVE-2005-4602

SQL injection vulnerability in inc/functionupload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment...

MyBB XSS cross-site scripting

Hey this is a security bug in printthread.PHP script of MyBBall version also fully patched that allows XSS crosssite scripting hacking and can be exploit without limitation. post this message on a thread and go to print view of thread to view execution of exploit. script...

MyBB 1.0 SQL injection in uploading file

Hey there is a security bug in inc/functionupload.php script in mybb all version except two days ago security updated version that allows SQL INJECTION this bug is in function of upload attachment . when a file goes to upload this function test that if file has a valid extension . for this call...

MyBB 1.0 - Globa.php Cookie Data SQL Injection

MyBB 1.0 - Globa.php Cookie Data SQL Injection source: https://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can...

MyBB 1.0 - 'Globa.php' Cookie Data SQL Injection

source: https://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can allow an attacker to bypass authentication and ga...

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16387/info MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have...

[TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Multiple SQL Injection vulnerabilities in MyBB Name: TKADV2005-12-001 Revision: 1.0 Release Date: 2005/12/23 Last Modified: 2005/12/23 Date Reported: 2005/11/07 Author: Tobias Klein tk at trapkit.de Affected Software: MyBB all versions = MyB...

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16387/info MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

MyBB calendar.php 'month' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'month' parameter of the calendar.php script. A remote, unauthenticated attacker can exploit this issue to manipulate SQL queries, resulting in...

CVE-2005-4199

MyBB prior to 1.0 is affected by multiple SQL injection vulnerabilities. The public details identify concrete vectors, notably the month parameter in calendar.php (SQLi), and additional parameters in usercp.php, member.php, and showthread/ratethread.php. This is a documented remote, unauthenticat...

CVE-2005-4200

MyBB before 1.0 contains multiple SQL injection vulnerabilities (CVE-2005-4199 and CVE-2005-4200) across calendar.php, usercp.php, member.php, showthread.php/ratethread.php, and related actions. Root cause: improper sanitization of user-supplied input in various parameters (e.g., calendar.php mon...

CVE-2005-4200: Undefined Security Weakness

Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199...

[TKPN2005-12-001] Multiple critical vulnerabilities in MyBB

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patch Notification: Multiple critical vulnerabilities in MyBB Name: TKPN2005-12-001 Revision: 1.0 Release Date: 2005/12/09 Last Modified: 2005/12/09 Date Reported: 2005/11/07 Author: Tobias Klein tk at trapkit.de Affected Software: MyBB all versions =...

CVE-2005-3776

Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via 1 the subject field when creating a new thread and 2 information passed to the Reputation system...

CVE-2005-3777

MyBB 1.0 PR2 Rev 686 is affected by a vulnerability that allows remote attackers to delete or move private messages (PM) by submitting modified fields in the inbox form. The provided documents confirm the affected software and the manipulation vector, but do not specify root cause details beyond ...

CVE-2005-3778

The CVE-2005-3778 entry concerns MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686. The vulnerability is described as an unspecified DoS achievable via unknown vectors, affecting the affected component and resulting in partial availability impact. Connected sources confirm the product and version ran...

CVE-2005-3776

CVE-2005-3776 affects MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 with XSS vulnerabilities in (1) the thread creation subject and (2) the Reputation system input. The root cause is provided as multiple XSS flaws allowing remote attackers to inject arbitrary script/HTML; specifics on versions, affected...

CVE-2005-3778

Unspecified vulnerability in MyBulletinBoard MyBB before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors...

CVE-2005-3778: Undefined Security Weakness

Unspecified vulnerability in MyBulletinBoard MyBB before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors...

CVE-2005-3777: Undefined Security Weakness

MyBulletinBoard MyBB 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages PM via modified fields in the inbox form...