Description
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Alpha_Programmer · perlwebappsphp
https://www.exploit-db.com/exploits/1172
Scores
EPSS
0.0126
EPSS Percentile
79.5%
Details
Status
published
Products (4)
mybulletinboard/mybulletinboard
1.00_rc1
mybulletinboard/mybulletinboard
1.00_rc2
mybulletinboard/mybulletinboard
1.00_rc3
mybulletinboard/mybulletinboard
1.00_rc4
Published
Aug 26, 2005
Tracked Since
Feb 18, 2026