Mybb · Mybb · CVE-2008-3070
Name of the Vulnerable Software and Affected Versions:
MyBB versions prior to 1.2.13
Description:
The issue is related to an unspecified vulnerability in the inc/datahandler/user.php file, which is likely connected to SQL injection. The vulnerability involves the `user['language']` variable.
Recommendations:
For versions prior to 1.2.13, update to version 1.2.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the inc/datahandler/user.php file or limiting the use of the `user['language']` variable until the update is applied.