CVE-2006-3758

Mô tả

Tham khảo

• community.mybboard.net/showthread.php
• myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html
• secunia.com/advisories/20873 · Patch
• mybboard.com/archive.php
• osvdb.org/26809
• exchange.xforce.ibmcloud.com/vulnerabilities/27445

Lỗ hổng khác của mybulletinboard

• CVE-2009-2230CAO 7.5SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to exe…
• CVE-2008-0787TRUNG BÌNH 6.5SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL comm…
• CVE-2008-0382CAO 7.5Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter…
• CVE-2007-2211CAO 7.5SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2007-1964TRUNG BÌNH 6.0member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any acco…