7.5
CVSSv2

CVE-2006-3243

Published: 27/06/2006 Updated: 20/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 up to and including 1.1.3 allows remote malicious users to execute arbitrary SQL commands via the showcodebuttons parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mybulletinboard mybulletinboard 1.0.2

mybulletinboard mybulletinboard 1.0.3

mybulletinboard mybulletinboard 1.00_rc1

mybulletinboard mybulletinboard 1.00_rc2

mybulletinboard mybulletinboard 1.1.1

mybulletinboard mybulletinboard 1.1.2

mybulletinboard mybulletinboard 1.0_pr2

mybulletinboard mybulletinboard 1.0_preview_release_2

mybulletinboard mybulletinboard 1.00_rc4_security_patch

mybulletinboard mybulletinboard 1.01

mybulletinboard mybulletinboard 1.0.4

mybulletinboard mybulletinboard 1.0_final

mybulletinboard mybulletinboard 1.00_rc3

mybulletinboard mybulletinboard 1.00_rc4

mybulletinboard mybulletinboard 1.1.3

mybulletinboard mybulletinboard 1.0.1

mybulletinboard mybulletinboard 1.0_rc2

mybulletinboard mybulletinboard 1.0_rc4

mybulletinboard mybulletinboard 1.04

mybulletinboard mybulletinboard 1.1