CVE-2006-4707

Mô tả

Tham khảo

• myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html · Exploit
• secunia.com/advisories/21697
• securityreason.com/securityalert/1540
• mybboard.com/archive.php · Patch
• securityfocus.com/archive/1/444782/100/100/threaded
• vupen.com/english/advisories/2006/3418

Lỗ hổng khác của mybulletinboard

• CVE-2009-2230CAO 7.5SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to exe…
• CVE-2008-0787TRUNG BÌNH 6.5SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL comm…
• CVE-2008-0382CAO 7.5Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter…
• CVE-2007-2211CAO 7.5SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2007-1964TRUNG BÌNH 6.0member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any acco…