CVE-2006-0218

Опубликовано: 16 янв. 2006

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php, and (6) usercp.php, and probably related to SQL injection. NOTE: it is likely that this issue subsumes CVE-2005-4602 and CVE-2005-4603. However, since the vendor advisory is vague and additional files are mentioned, is is likely that this contains at least one distinct vulnerability from CVE-2005-4602 and CVE-2005-4603.

Ссылки

http://community.mybboard.net/showthread.php?tid=5852
Patch
Vendor Advisory
http://community.mybboard.net/showthread.php?tid=5852
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*

Версия до 1.01 (включая)

cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:beta4:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:pr1:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:pr2:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:rc3:*:*:*:*:*:*

cpe:2.3:a:mybb:mybb:1.0:rc4:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00313

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vxwc-3vfr-5mpq

github

почти 4 года назад