CVE

Id
59152  
CVE No.
CVE-2012-5909  
Status
Candidate  
Description
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergroup][] parameter in a search action to admin/index.php.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603853 59152 CVE-2012-5909 MISC:http://packetstormsecurity.org/files/111238/MyBB-1.6.6-Cross-Site-Scripting-SQL-Injection.html  View
603854 59152 CVE-2012-5909 BID:52743  View
603855 59152 CVE-2012-5909 URL:http://www.securityfocus.com/bid/52743  View
603856 59152 CVE-2012-5909 OSVDB:80634  View
603857 59152 CVE-2012-5909 URL:http://osvdb.org/80634  View
603858 59152 CVE-2012-5909 XF:mybb-index-conditionsusergroup-sql-injection(74396)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29702 JVNDB-2012-005409 Neocrome Seditio の system/functions.php 内の sed_import 関数におけるクロスサイトスクリプティングの脆弱性 Neocrome Seditio の system/functions.php 内の sed_import 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-5914 59152 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005409.html  View