Mybulletinboard » Mybulletinboard : Security Vulnerabilities, CVEs, Published In 2007 (Sql injection)
SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action.
Max CVSS
7.5
EPSS Score
0.65%
Published
2007-04-24
Updated
2017-10-11
SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.
Max CVSS
7.5
EPSS Score
9.93%
Published
2007-04-11
Updated
2018-10-16
2 vulnerabilities found