CVE

Id
25320  
CVE No.
CVE-2007-1963  
Status
Candidate  
Description
SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.  
Phase
Assigned (20070410)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252500 25320 CVE-2007-1963 BUGTRAQ:20070403 MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit  View
252501 25320 CVE-2007-1963 URL:http://www.securityfocus.com/archive/1/archive/1/464563/100/0/threaded  View
252502 25320 CVE-2007-1963 MILW0RM:3653  View
252503 25320 CVE-2007-1963 URL:http://www.milw0rm.com/exploits/3653  View
252504 25320 CVE-2007-1963 CONFIRM:http://community.mybboard.net/attachment.php?aid=5842  View
252505 25320 CVE-2007-1963 CONFIRM:http://community.mybboard.net/showthread.php?tid=18002  View
252506 25320 CVE-2007-1963 VUPEN:ADV-2007-1244  View
252507 25320 CVE-2007-1963 URL:http://www.vupen.com/english/advisories/2007/1244  View
252508 25320 CVE-2007-1963 OSVDB:34657  View
252509 25320 CVE-2007-1963 URL:http://osvdb.org/34657  View
252510 25320 CVE-2007-1963 SECUNIA:24689  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53112 JVNDB-2007-001804 eXV2 CMS におけるクロスサイトスクリプティングの脆弱性 eXV2 CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1965 25320 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001804.html  View