PT-2009-1673 · Mybb · Mybb Custom Pages Plugin

Lidloses_Auge · Published 2009-02-20 · Updated 2025-09-26 · CVE-2008-6198

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyBB Custom Pages plugin version 1.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the pages.php file of the Custom Pages plugin.

Recommendations For MyBB Custom Pages plugin version 1.0, consider disabling the pages.php file or restricting access to it until a patch is available to prevent exploitation. Avoid using the page parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-6198

Affected Products

Mybb Custom Pages Plugin

References · 5

• 🔥 https://exploit-db.com/exploits/5379 · Exploit
• 🔥 http://securityfocus.com/bid/28652 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6198 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41685 · Note
• https://t.me/cveNotify/136637 · Telegram Post