Vulnerabilities > Mysmartbb

DATE CVE VULNERABILITY TITLE RISK
2006-04-29 CVE-2006-2090 SQL Injection vulnerability in Mysmartbb 1.1.2/1.1.3
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters.
network
low complexity
mysmartbb CWE-89
7.5
2006-04-29 CVE-2006-2089 Input Validation vulnerability in Mysmartbb 1.1.2/1.1.3
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) username parameters.
network
mysmartbb
4.3