CVE-2006-0638

概要

参考情報

• myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html · Exploit
• secunia.com/advisories/18754
• osvdb.org/22957
• securityfocus.com/archive/1/424335/100/0/threaded
• securityfocus.com/bid/16538
• vupen.com/english/advisories/2006/0475

mybulletinboard のその他の脆弱性

• CVE-2009-2230高 7.5SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to exe…
• CVE-2008-0787中 6.5SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL comm…
• CVE-2008-0382高 7.5Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter…
• CVE-2007-2211高 7.5SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2007-1964中 6.0member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any acco…