CVE Vulnerabilities

CVE-2005-2697

Published: Aug 26, 2005 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.

Affected Software

Name Vendor Start Version End Version
Mybulletinboard Mybulletinboard 1.00_rc1 1.00_rc1
Mybulletinboard Mybulletinboard 1.00_rc2 1.00_rc2
Mybulletinboard Mybulletinboard 1.00_rc3 1.00_rc3
Mybulletinboard Mybulletinboard 1.00_rc4 1.00_rc4

References