PT-2006-4138 · Mybulletinboard · Mybb

Imei Addmimistrator · Publicado 2006-06-27 · Atualizado 2017-07-20 · CVE-2006-3243

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB (MyBulletinBoard) versions 1.0 through 1.1.3

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the showcodebuttons parameter in the usercp.php file.

Recommendations For MyBB (MyBulletinBoard) versions 1.0 through 1.1.3, consider restricting access to the showcodebuttons parameter in the usercp.php file until a patch is available.

Correção

Identificadores relacionados

CVE-2006-3243

Produtos afetados

Mybb

Referências · 8

• http://securityreason.com/securityalert/1147 · Nota
• http://secunia.com/advisories/20795 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3243 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2511 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27410 · Nota
• http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html · Nota
• http://community.mybboard.net/showthread.php?tid=9955 · Nota
• http://securityfocus.com/archive/1/438209 · Nota