Description

SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergroup][] parameter in a search action to admin/index.php.

Remediation

References

CVE-2012-5909

Related Vulnerabilities

MySQL CVE-2019-2830 Vulnerability (CVE-2019-2830)

WordPress Plugin Global Content Blocks Cross-Site Request Forgery (2.1.5)

Apache Tomcat Other Vulnerability (CVE-2005-2090)

Ruby Use of Externally-Controlled Format String Vulnerability (CVE-2018-8778)

WordPress Plugin 3D Cover Carousel Cross-Site Scripting (1.0)

Severity

High

Classification

CVE-2012-5909 CWE-138

Tags

Missing Update Known Vulnerabilities