Vulnerabilities > CVE-2006-0219 - Unspecified vulnerability in Mybulletinboard

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
mybulletinboard
NVD
Published: 2006-01-16
Updated: 2024-11-21

Summary

The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php.

Vulnerable Configurations

Part Description Count
Application
Mybulletinboard
4

References