Description
SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter.
References
- 16538 vdb-entry
- 22957 vdb-entry
- ADV-2006-0475 vdb-entry
- 18754 third-party-advisory
- 20060207 [myimei]MyBB1.0.3~moderation.php~SqlInject while merging posts mailing-list
- http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html