CVE

Id
47680  
CVE No.
CVE-2010-5096  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn"t lead to an SQL injection, it does provide a general MyBB SQL error."  
Phase
Assigned (20120430)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
519488 47680 CVE-2010-5096 MLIST:[oss-security] 20120323 CVE-request: MyBB 1.6 <= SQL Injection  View
519489 47680 CVE-2010-5096 URL:http://www.openwall.com/lists/oss-security/2012/03/23/4  View
519490 47680 CVE-2010-5096 MLIST:[oss-security] 20120325 Re: CVE-request: MyBB 1.6 <= SQL Injection  View
519491 47680 CVE-2010-5096 URL:http://www.openwall.com/lists/oss-security/2012/03/25/1  View
519492 47680 CVE-2010-5096 MLIST:[oss-security] 20120508 CVE-request: MyBB before 1.6.1  View
519493 47680 CVE-2010-5096 URL:http://www.openwall.com/lists/oss-security/2012/05/08/3  View
519494 47680 CVE-2010-5096 MLIST:[oss-security] 20120508 Re: CVE-request: MyBB before 1.6.1  View
519495 47680 CVE-2010-5096 URL:http://www.openwall.com/lists/oss-security/2012/05/08/7  View
519496 47680 CVE-2010-5096 MISC:http://dev.mybb.com/issues/1330  View
519497 47680 CVE-2010-5096 BID:45565  View
519498 47680 CVE-2010-5096 URL:http://www.securityfocus.com/bid/45565  View
519499 47680 CVE-2010-5096 OSVDB:70013  View
519500 47680 CVE-2010-5096 URL:http://www.osvdb.org/70013  View
519501 47680 CVE-2010-5096 OSVDB:70014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37830 JVNDB-2010-003615 TYPO3 の Install ツールにおけるクロスサイトスクリプティングの脆弱性 TYPO3 の Install ツールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-5100 47680 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003615.html  View