Vulnerabilities > Mybulletinboard
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2005-12-13 | CVE-2005-4200 | SQL Injection vulnerability in MyBB Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199. | 10.0 |
2005-11-23 | CVE-2005-3778 | Denial-Of-Service vulnerability in MyBulletinBoard Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors. | 5.0 |
2005-11-23 | CVE-2005-3777 | Remote Security vulnerability in Mybulletinboard Previewrelease2Rev686 MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form. | 5.0 |
2005-11-23 | CVE-2005-3776 | Cross-Site Scripting vulnerability in Mybulletinboard Previewrelease2Rev686 Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system. network mybulletinboard | 4.3 |
2005-10-27 | CVE-2005-3326 | SQL Injection vulnerability in MyBulletinBoard Usercp.PHP SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter. | 7.5 |
2005-09-14 | CVE-2005-2888 | SQL-Injection vulnerability in MyBB Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php. | 7.5 |
2005-09-02 | CVE-2005-2778 | SQL Injection vulnerability in MyBB Member.PHP SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter. | 7.5 |
2005-08-26 | CVE-2005-2697 | SQL Injection vulnerability in MyBulletinBoard Search.PHP SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. | 7.5 |
2005-08-16 | CVE-2005-2580 | SQL Injection vulnerability in Mybulletinboard 1.00Rc4Securitypatch Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php. | 7.5 |
2005-06-01 | CVE-2005-1811 | HTML Injection vulnerability in Mybulletinboard 1.0Rc4 Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile. network mybulletinboard | 4.3 |