CVE-2007-2212

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2007-2212 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBMyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL InjectionExploitDB exploitby 0x86Not analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

2