2260 matches found
MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection
source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise...
MyBulletinBoard (MyBB) RC4 - action SQL Injection
MyBulletinBoard MyBB RC4 - action SQL Injection source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...
CVE-2005-1832
Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the 1 forums, 2 version, or 3 limit parameter to misc.php, 4 page or 5 datecut parameter to forumdisplay.php, 6 username, 7 email, or 8...
CVE-2005-1832
CVE-2005-1832 affects MyBulletinBoard (MyBB) 1.00 RC4 and earlier. Multiple XSS flaws allow remote attackers to inject arbitrary web script/HTML via various parameters across pages (misc.php, forumdisplay.php, member.php, memberlist.php, showthread.php, printthread.php). Root cause: unsanitized u...
CVE-2005-1833
CVE-2005-1833 describes multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4. The vulnerabilities allow remote attackers to execute arbitrary SQL commands through specific parameters in various scripts, including: calendar.php (eid), online.php (idsql), memberlist.php (userse...
CVE-2005-1811
Technical details for CVE-2005-1811 are not publicly available in the provided documents. Monitor for updates.
Multiple vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4
CODEBUG Labs Advisory 7 Title: Multiple vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 Author: Alberto Trivero English Version: Alberto Trivero Product: MyBulletinBoard 1.00 RC4 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.mybboard.com "MyBB is a powerful,...
CVE-2005-1833
Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...
MyBB 1.0 RC4 XSS Bug
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
MyBulletinBoard (MyBB) RC4 - Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to multiple SQL injection vulnerabilities...
MyBulletinBoard (MyBB) RC4 - Multiple Cross-Site Scripting SQL Injections
MyBulletinBoard MyBB RC4 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...
CVE-2005-0282
SQL injection vulnerability in member.php in MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the uid parameter...
CVE-2005-0282
CVE-2005-0282 affects MyBB/MyBulletinBoard: SQL injection in member.php via the uid parameter, allowing remote command execution. The vulnerability arises from unsanitized input in the uid field, with CVSS v2 base score 7.5 (HIGH) and network access, low attack complexity, no authentication requi...
MyBB member.php 'uid' Parameter SQLi
The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...
mybbSQL.txt
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
MyBB < 1.1.1 Multiple Script Variable Overwrite
Binary data 3519.prm...
MyBB < 1.4.8 Multiple XSS
Binary data 5089.prm...
MyBB < 1.2.13 SQL Injection
Binary data 4573.prm...