Page 2 of 20 results (0.003 seconds)

CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0

CVE-2006-3420

https://notcve.org/view.php?id=CVE-2006-3420

07 Jul 2006 — Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en editpost.php en MyBulletinBoard (M... • http://secunia.com/advisories/20659 •

CVSS: 9.8EPSS: 0%CPEs: 20EXPL: 0

CVE-2006-3243

https://notcve.org/view.php?id=CVE-2006-3243

27 Jun 2006 — SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter. Vulnerabilidad de inyección SQL en usercp.php en MyBB (MyBulletinBoard) v1.0 hasta v1.1.3 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro showcodebuttons. • http://community.mybboard.net/showthread.php?tid=9955 •

CVSS: 9.8EPSS: 9%CPEs: 1EXPL: 1

CVE-2006-2908 – MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution

https://notcve.org/view.php?id=CVE-2006-2908

13 Jun 2006 — The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a preg_replace function call with a /e (executable) modifier. • https://www.exploit-db.com/exploits/1909 •

CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2006-2949

https://notcve.org/view.php?id=CVE-2006-2949

12 Jun 2006 — Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter. • http://secunia.com/advisories/20492 •

CVSS: 6.1EPSS: 0%CPEs: 11EXPL: 5

CVE-2006-1281

https://notcve.org/view.php?id=CVE-2006-1281

19 Mar 2006 — Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable. • http://community.mybboard.net/showthread.php?tid=7368 •

CVSS: 6.1EPSS: 0%CPEs: 10EXPL: 3

CVE-2006-1282

https://notcve.org/view.php?id=CVE-2006-1282

19 Mar 2006 — CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages. • http://community.mybboard.net/showthread.php?tid=7368 •

CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 0

CVE-2005-4602

https://notcve.org/view.php?id=CVE-2005-4602

31 Dec 2005 — SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment. • http://secunia.com/advisories/18281 •

CVSS: 6.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2005-4603

https://notcve.org/view.php?id=CVE-2005-4603

31 Dec 2005 — Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread. • http://secunia.com/advisories/18281 •

CVSS: 10.0EPSS: 0%CPEs: 13EXPL: 0

CVE-2005-4200

https://notcve.org/view.php?id=CVE-2005-4200

13 Dec 2005 — Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199. • http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964 •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 3

CVE-2005-3326 – MyBulletinBoard (MyBB) 1.0 - 'usercp.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-3326

27 Oct 2005 — SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter. • https://www.exploit-db.com/exploits/26396 •