Page 3 of 23 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-3777

https://notcve.org/view.php?id=CVE-2005-3777

23 Nov 2005 — MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form. • http://marc.info/?l=bugtraq&m=113198945111329&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 3

CVE-2005-3326 – MyBulletinBoard (MyBB) 1.0 - 'usercp.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-3326

27 Oct 2005 — SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter. • https://www.exploit-db.com/exploits/26396 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-2888

https://notcve.org/view.php?id=CVE-2005-2888

14 Sep 2005 — Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php. • http://marc.info/?l=bugtraq&m=112611068702781&w=2 •