CVE

Id
55567  
CVE No.
CVE-2012-2324  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the (1) user search or (2) Mail Log in the Admin Control Panel (ACP).  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579766 55567 CVE-2012-2324 MLIST:[oss-security] 20120507 CVE request: mybb before 1.6.7  View
579767 55567 CVE-2012-2324 URL:http://www.openwall.com/lists/oss-security/2012/05/07/13  View
579768 55567 CVE-2012-2324 MLIST:[oss-security] 20120507 Re: CVE request: mybb before 1.6.7  View
579769 55567 CVE-2012-2324 URL:http://www.openwall.com/lists/oss-security/2012/05/07/14  View
579770 55567 CVE-2012-2324 CONFIRM:http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/  View
579771 55567 CVE-2012-2324 BID:53417  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26686 JVNDB-2012-002393 PHP の apache_request_headers 関数におけるバッファオーバーフローの脆弱性 PHP の sapi/cgi/cgi_main.c 内の apache_request_headers 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2012-2329 55567 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002393.html  View