Lucene search

K
vulnrichmentRedhatVULNRICHMENT:CVE-2010-5096
HistoryAug 13, 2012 - 11:00 p.m.

CVE-2010-5096

2012-08-1323:00:00
redhat
github.com
3
mybb
sql injection
remote execution

AI Score

8.8

Confidence

Low

EPSS

0.003

Percentile

71.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn’t lead to an SQL injection, it does provide a general MyBB SQL error.

AI Score

8.8

Confidence

Low

EPSS

0.003

Percentile

71.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2010-5096