Description
SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field.
References (6)
Core 6
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2008/09/09/1
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31760
Various Sources x_refsource_confirm
http://community.mybboard.net/showthread.php?tid=36022
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/31104
Various Sources x_refsource_confirm
http://community.mybboard.net/attachment.php?aid=10579
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2008/09/09/9
Scores
EPSS
0.0126
EPSS Percentile
66.6%
Details
CWE
CWE-89
Status
published
Products (30)
mybb/mybb
1.00
mybb/mybb
1.01
mybb/mybb
1.1.0
mybb/mybb
1.1.1
mybb/mybb
1.1.2
mybb/mybb
1.1.3
mybb/mybb
1.1.4
mybb/mybb
1.1.5
mybb/mybb
1.1.6
mybb/mybb
1.1.7
... and 20 more
Published
Sep 11, 2008
Tracked Since
Feb 18, 2026