Skip to content
OpenAdvisories
Unscored CVE-2006-2589 EUVD-2006-2588GHSA-7922-2gj2-vj5c

SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via th…

Published May 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten with static data in the extracted source code.

References