Vulnerabilities > Mybulletinboard

DATE CVE VULNERABILITY TITLE RISK
2005-12-13 CVE-2005-4200 SQL Injection vulnerability in MyBB
Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199.
network
low complexity
mybulletinboard
critical
10.0
2005-11-23 CVE-2005-3778 Denial-Of-Service vulnerability in MyBulletinBoard
Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors.
network
low complexity
mybulletinboard
5.0
2005-11-23 CVE-2005-3777 Remote Security vulnerability in Mybulletinboard Previewrelease2Rev686
MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.
network
low complexity
mybulletinboard
5.0
2005-11-23 CVE-2005-3776 Cross-Site Scripting vulnerability in Mybulletinboard Previewrelease2Rev686
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system.
network
mybulletinboard
4.3
2005-10-27 CVE-2005-3326 SQL Injection vulnerability in MyBulletinBoard Usercp.PHP
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter.
network
low complexity
mybulletinboard
7.5
2005-09-14 CVE-2005-2888 SQL-Injection vulnerability in MyBB
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.
network
low complexity
mybulletinboard
7.5
2005-09-02 CVE-2005-2778 SQL Injection vulnerability in MyBB Member.PHP
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter.
network
low complexity
mybulletinboard
7.5
2005-08-26 CVE-2005-2697 SQL Injection vulnerability in MyBulletinBoard Search.PHP
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter.
network
low complexity
mybulletinboard
7.5
2005-08-16 CVE-2005-2580 SQL Injection vulnerability in Mybulletinboard 1.00Rc4Securitypatch
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php.
network
low complexity
mybulletinboard
7.5
2005-06-01 CVE-2005-1811 HTML Injection vulnerability in Mybulletinboard 1.0Rc4
Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile.
network
mybulletinboard
4.3