Description
SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.
References
- mybb-global-sql-injection(24416) vdb-entry
- 22903 vdb-entry
- ADV-2006-0400 vdb-entry
- 18678 third-party-advisory
- http://community.mybboard.net/showthread.php?tid=6418