PT-2006-4618 · Mybulletinboard · Mybb

Imei · Published 2006-07-21 · Updated 2017-07-20 · CVE-2006-3758

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB (aka MyBulletinBoard) version 1.1.4

Description The issue allows remote attackers to overwrite arbitrary variables due to the extract function being called with EXTR OVERWRITE on HTTP POST and GET variables in the inc/init.php file when Archive Mode (Light) is used. This can be exploited for SQL injection, for example, by manipulating the SERVER[HTTP CLIENT IP] parameter in archive/index.php.

Recommendations For MyBB (aka MyBulletinBoard) version 1.1.4, consider restricting access to the archive mode or temporarily disabling the use of the extract function with EXTR OVERWRITE on HTTP variables until a proper fix is available. Avoid using the SERVER[HTTP CLIENT IP] parameter in the archive/index.php file to minimize the risk of SQL injection exploitation.

Fix

Related Identifiers

CVE-2006-3758

Affected Products

Mybb

References · 7

• http://secunia.com/advisories/20873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3758 · Security Note
• http://osvdb.org/26809 · Note
• http://community.mybboard.net/showthread.php?tid=10115 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27445 · Note
• http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html · Note
• http://mybboard.com/archive.php?nid=15 · Note