Description

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2012-2325

Related Vulnerabilities

Django Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-3444)

WordPress Plugin hashtagger Unspecified Vulnerability (6)

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Open Redirect (4.4.1)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1184)

XWikiplatform Missing Authorization Vulnerability (CVE-2024-55879)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2012-2325