Unscored CVE-2006-1065 EUVD-2006-1069GHSA-frch-hv74-gh2h

SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the …

Published Mar 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter.

References

mybb-search-sql-injection(25018) vdb-entry
19061 third-party-advisory
20060302 MyBB 1.0.4 New SQL Injection mailing-list