Description

Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the (1) user search or (2) Mail Log in the Admin Control Panel (ACP).

Remediation

References

CVE-2012-2324

Related Vulnerabilities

PrestaShop Improper Input Validation Vulnerability (CVE-2023-39530)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-8903)

MySQL CVE-2015-0438 Vulnerability (CVE-2015-0438)

Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-9591)

WordPress Plugin Amministrazione Trasparente Cross-Site Request Forgery (7.1)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2012-2324