CVE-2006-4707

Description

References

• myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html · Exploit
• secunia.com/advisories/21697
• securityreason.com/securityalert/1540
• mybboard.com/archive.php · Patch
• securityfocus.com/archive/1/444782/100/100/threaded
• vupen.com/english/advisories/2006/3418

mybulletinboard 的其他漏洞

• CVE-2009-2230高危 7.5SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to exe…
• CVE-2008-0787中危 6.5SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL comm…
• CVE-2008-0382高危 7.5Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter…
• CVE-2007-2211高危 7.5SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to execute arbitrary SQL…
• CVE-2007-1964中危 6.0member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any acco…