Page 6 of 63 results (0.007 seconds)

CVSS: 10.0EPSS: 0%CPEs: 13EXPL: 0

CVE-2005-4200

https://notcve.org/view.php?id=CVE-2005-4200

13 Dec 2005 — Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199. • http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964 •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-3776

https://notcve.org/view.php?id=CVE-2005-3776

23 Nov 2005 — Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system. • http://marc.info/?l=bugtraq&m=113198945111329&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-3777

https://notcve.org/view.php?id=CVE-2005-3777

23 Nov 2005 — MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form. • http://marc.info/?l=bugtraq&m=113198945111329&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-3778

https://notcve.org/view.php?id=CVE-2005-3778

23 Nov 2005 — Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors. • http://community.mybboard.net/showthread.php?tid=4507&pid=27223#pid27223 •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 3

CVE-2005-3326 – MyBulletinBoard (MyBB) 1.0 - 'usercp.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-3326

27 Oct 2005 — SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter. • https://www.exploit-db.com/exploits/26396 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2005-2888

https://notcve.org/view.php?id=CVE-2005-2888

14 Sep 2005 — Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php. • http://marc.info/?l=bugtraq&m=112611068702781&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 1

CVE-2005-2778

https://notcve.org/view.php?id=CVE-2005-2778

02 Sep 2005 — SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter. • http://marc.info/?l=bugtraq&m=112535137320050&w=2 •

CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 1

CVE-2005-2697 – MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection

https://notcve.org/view.php?id=CVE-2005-2697

25 Aug 2005 — SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282. • https://www.exploit-db.com/exploits/1172 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 4

CVE-2005-2580 – MyBulletinBoard (MyBB) RC4 - 'action' SQL Injection

https://notcve.org/view.php?id=CVE-2005-2580

16 Aug 2005 — Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php. • https://www.exploit-db.com/exploits/26150 •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2005-1811

https://notcve.org/view.php?id=CVE-2005-1811

01 Jun 2005 — Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile. • http://seclists.org/lists/bugtraq/2005/May/0338.html •