CVE-2006-0219

The original distribution of MyBulletinBoard MyBB to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct 1 SQL injection attacks via an attachment name that is not properly handled by inc/functionsupload.php...

CVE-2006-0218: Undefined Security Weakness

Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0.2 have unspecified impact and attack vectors, related to 1 admin/moderate.php, 2 admin/themes.php, 3 inc/functions.php, 4 inc/functionsupload.php, 5 printthread.php, and 6 usercp.php, and probably related to SQL injection...

CVE-2006-0219: Undefined Security Weakness

The original distribution of MyBulletinBoard MyBB to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct 1 SQL injection attacks via an attachment name that is not properly handled by inc/functionsupload.php...

MyBB 1.0.2 SQL injection in usercp.php

this is a bug report for MyBB 1.0.2latest version bug found by imei there is a security bug in usercp.php line 830 that Allows SQL Injection and can result to full access to admin cp. bug is in result of poor checking of $mybb-input'threadmode' value against all other values in usercp.php file...

CVE-2005-4642: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4612

VULNERABILITY SUMMARY (CVE-2005-4612) : The affected software is VUBB alpha rc1. It contains multiple SQL injection vulnerabilities in three entry points: viewforum.php (parameter f), viewtopic.php (parameter t), and usercp.php (parameter view). The underlying issue is improper handling of user-s...

CVE-2005-4612: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the 1 f parameter to viewforum.php, 2 t parameter to viewtopic.php, and 3 view parameter to usercp.php...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4199

MyBB prior to 1.0 is affected by multiple SQL injection vulnerabilities. The public details identify concrete vectors, notably the month parameter in calendar.php (SQLi), and additional parameters in usercp.php, member.php, and showthread/ratethread.php. This is a documented remote, unauthenticat...

CVE-2005-4199: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB before 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 month, 2 day, and 3 year parameters in an addevent action in calendar.php; 4 threadmode and 5 showcodebuttons in an options action in usercp.php; 6 list...

CVE-2005-3326

SQL injection vulnerability in usercp.php in MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the awayday parameter...

CVE-2005-3326

The CVE-2005-3326 entry concerns MyBulletinBoard (MyBB) where SQL injection is possible in usercp.php via the awayday parameter, enabling remote SQL commands. Affected software: MyBB/MyBulletinBoard; vulnerable component: usercp.php (likely parameter handling). Underlying cause: unvalidated input...

CVE-2005-3326

SQL injection vulnerability in usercp.php in MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the awayday parameter...

CVE-2005-3326: Undefined Security Weakness

SQL injection vulnerability in usercp.php in MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the awayday parameter...

CVE-2005-1811

Technical details for CVE-2005-1811 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1811: Undefined Security Weakness

Cross-site scripting XSS vulnerability in usercp.php for MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile...