NVD

Id
16331  
Name
CVE-2010-5096  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn"t lead to an SQL injection, it does provide a general MyBB SQL error."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2012-08-13  
Modified Date
2012-08-14  
Seq
2010-5096  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
91840 16331 CVE-2010-5096 http://dev.mybb.com/issues/1330  View
91841 16331 CVE-2010-5096 [oss-security] 20120323 CVE-request: MyBB 1.6 <= SQL Injection  View
91842 16331 CVE-2010-5096 [oss-security] 20120325 Re: CVE-request: MyBB 1.6 <= SQL Injection  View
91843 16331 CVE-2010-5096 [oss-security] 20120508 CVE-request: MyBB before 1.6.1  View
91844 16331 CVE-2010-5096 [oss-security] 20120508 Re: CVE-request: MyBB before 1.6.1  View
91845 16331 CVE-2010-5096 45565  View

Related JVN