CVE-2005-4603

The CVE-2005-4603 entry describes a Cross-site scripting (XSS) vulnerability in printthread.php of MyBB versions 1.0.1 and earlier. The issue arises because thread messages are not properly sanitized in the print view, allowing remote attackers to inject arbitrary web script or HTML via the threa...

MyBB < 1.01 function_upload.php SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the to the file extension of an uploaded file. A remote, unauthenticated attacker can exploit this issue to manipulate SQL queries, resulting in the...

CVE-2005-4603

Cross-site scripting XSS vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread...

CVE-2005-4602

CVE-2005-4602 relates to MyBB before 1.0.1, where an SQL injection vulnerability exists in inc/functions_upload.php that can be exploited via the file extension of an uploaded attachment to execute arbitrary SQL. Evidence in connected records confirms this issue and links it to later notes that M...

CVE-2005-4603

Cross-site scripting XSS vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread...

CVE-2005-4602

SQL injection vulnerability in inc/functionupload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment...

MyBB 1.0 SQL injection in uploading file

Hey there is a security bug in inc/functionupload.php script in mybb all version except two days ago security updated version that allows SQL INJECTION this bug is in function of upload attachment . when a file goes to upload this function test that if file has a valid extension . for this call...

MyBB XSS cross-site scripting

Hey this is a security bug in printthread.PHP script of MyBBall version also fully patched that allows XSS crosssite scripting hacking and can be exploit without limitation. post this message on a thread and go to print view of thread to view execution of exploit. script...

MyBB 1.0 - Globa.php Cookie Data SQL Injection

MyBB 1.0 - Globa.php Cookie Data SQL Injection source: https://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can...

MyBB 1.0 - 'Globa.php' Cookie Data SQL Injection

source: https://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can allow an attacker to bypass authentication and ga...

[TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Multiple SQL Injection vulnerabilities in MyBB Name: TKADV2005-12-001 Revision: 1.0 Release Date: 2005/12/23 Last Modified: 2005/12/23 Date Reported: 2005/11/07 Author: Tobias Klein tk at trapkit.de Affected Software: MyBB all versions = MyB...

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16387/info MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have...

MyBB 1.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16387/info MyBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

MyBB calendar.php 'month' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'month' parameter of the calendar.php script. A remote, unauthenticated attacker can exploit this issue to manipulate SQL queries, resulting in...

CVE-2005-4200

MyBB before 1.0 contains multiple SQL injection vulnerabilities (CVE-2005-4199 and CVE-2005-4200) across calendar.php, usercp.php, member.php, showthread.php/ratethread.php, and related actions. Root cause: improper sanitization of user-supplied input in various parameters (e.g., calendar.php mon...

CVE-2005-4199

MyBB prior to 1.0 is affected by multiple SQL injection vulnerabilities. The public details identify concrete vectors, notably the month parameter in calendar.php (SQLi), and additional parameters in usercp.php, member.php, and showthread/ratethread.php. This is a documented remote, unauthenticat...

[TKPN2005-12-001] Multiple critical vulnerabilities in MyBB

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Patch Notification: Multiple critical vulnerabilities in MyBB Name: TKPN2005-12-001 Revision: 1.0 Release Date: 2005/12/09 Last Modified: 2005/12/09 Date Reported: 2005/11/07 Author: Tobias Klein tk at trapkit.de Affected Software: MyBB all versions =...

CVE-2005-3776

Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via 1 the subject field when creating a new thread and 2 information passed to the Reputation system...

CVE-2005-3778

The CVE-2005-3778 entry concerns MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686. The vulnerability is described as an unspecified DoS achievable via unknown vectors, affecting the affected component and resulting in partial availability impact. Connected sources confirm the product and version ran...

CVE-2005-3777

MyBB 1.0 PR2 Rev 686 is affected by a vulnerability that allows remote attackers to delete or move private messages (PM) by submitting modified fields in the inbox form. The provided documents confirm the affected software and the manipulation vector, but do not specify root cause details beyond ...