CVE-2014-9240
MyBB <1.8.2 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the question_id parameter in a do_register action.
Exploits (1)
Scores
EPSS
0.0135
EPSS Percentile
80.1%
Details
CWE
CWE-89
Status
published
Products (2)
mybb/mybb
1.8.0
mybb/mybb
1.8.1
Published
Dec 03, 2014
Tracked Since
Feb 18, 2026