Unscored CVE-2005-4602 EUVD-2005-4597GHSA-w84r-7vwm-vm7g

SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via t…

Published Jan 2, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment.

References

ADV-2006-0012 vdb-entry
20051231 MyBB 1.0 SQL injection in uploading file mailing-list
22159 vdb-entry
311 third-party-advisory
18281 third-party-advisory
16097 vdb-entry