Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mybulletinboard mybulletinboard 1.0 pr2 vulnerabilities and exploits

(subscribe to this query)
755
VMScore

CVE-2005-3326

SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote malicious users to execute arbitrary SQL commands via the awayday parameter.
Mybulletinboard Mybulletinboard Rc4Mybulletinboard Mybulletinboard 1.0 Pr2
383
VMScore

CVE-2006-0364

Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote malicious users to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references with...
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.0 Rc2Mybulletinboard Mybulletinboard 1.0 Preview Release 2
435
VMScore

CVE-2006-0470

Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote malicious users to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection.
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.0 Rc2Mybulletinboard Mybulletinboard 1.0 Preview Release 2
668
VMScore

CVE-2006-0523

SQL injection vulnerability in global.php in MyBB prior to 1.03 allows remote malicious users to execute arbitrary SQL commands via the templatelist variable.
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.0 Rc2Mybulletinboard Mybulletinboard 1.0 Preview Release 2
755
VMScore

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) prior to 1.04 allows remote malicious users to execute arbitrary SQL commands via the referrer parameter.
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.0.3Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.0 Rc2Mybulletinboard Mybulletinboard 1.0 Preview Release 2
231
VMScore

CVE-2006-0770

Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote malicious users to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in "advanced details". NOTE: the provenance of t...
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.0.3Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.4Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.0 Rc2Mybulletinboard Mybulletinboard 1.0 Preview Release 2
383
VMScore

CVE-2006-1282

CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote malicious users to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other we...
Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard Rc3Mybulletinboard Mybulletinboard Rc2Mybulletinboard Mybulletinboard Rc1Mybulletinboard Mybulletinboard 1.0.3Mybulletinboard Mybulletinboard Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.4Mybulletinboard Mybulletinboard 1.0.2
312
VMScore

CVE-2006-1281

Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote malicious users to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable.
Mybulletinboard Mybulletinboard 1.10Mybulletinboard Mybulletinboard 1.0 FinalMybulletinboard Mybulletinboard Rc3Mybulletinboard Mybulletinboard Rc2Mybulletinboard Mybulletinboard Rc1Mybulletinboard Mybulletinboard 1.0.3Mybulletinboard Mybulletinboard Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.4Mybulletinboard Mybulletinboard 1.0.2
383
VMScore

CVE-2005-4603

Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.
Mybulletinboard Mybulletinboard 1.0 Rc4Mybulletinboard Mybulletinboard 1.00 Rc4Mybulletinboard Mybulletinboard Rc3Mybulletinboard Mybulletinboard 1.00 Rc3Mybulletinboard Mybulletinboard Rc2Mybulletinboard Mybulletinboard Rc1Mybulletinboard Mybulletinboard 1.00 Rc4 Security PatchMybulletinboard Mybulletinboard 1.00 Rc1Mybulletinboard Mybulletinboard Rc4Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.00 Rc2Mybulletinboard Mybulletinboard 1.0.1
760
VMScore

CVE-2008-0382

Multiple eval injection vulnerabilities in MyBB 1.2.10 and previous versions allow remote malicious users to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php.
Mybulletinboard Mybulletinboard 1.10Mybulletinboard Mybulletinboard 1.1.1Mybulletinboard Mybulletinboard 1.2.3Mybulletinboard Mybulletinboard 1.0Mybulletinboard Mybulletinboard 1.1.8Mybulletinboard Mybulletinboard 1.2Mybulletinboard Mybulletinboard 1.2.5Mybulletinboard Mybulletinboard 1.1.3Mybulletinboard Mybulletinboard 1.2.10Mybulletinboard Mybulletinboard 1.0.3Mybulletinboard Mybulletinboard 1.1.5Mybulletinboard Mybulletinboard 1.0 Pr2Mybulletinboard Mybulletinboard 1.1Mybulletinboard Mybulletinboard 1.1.4Mybulletinboard Mybulletinboard 1.0.1Mybulletinboard Mybulletinboard 1.0.4Mybulletinboard Mybulletinboard 1.1.2Mybulletinboard Mybulletinboard 1.0.2Mybulletinboard Mybulletinboard 1.1.7
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30065CVE-2024-5843CVE-2024-30080code executionCVE-2024-4577CVE-2024-26169wirelessremote code executionCVE-2024-36103
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook