NVD

Id
361  
Name
CVE-2008-0383  
Description
Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a do_mergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a do_multimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-22  
Modified Date
2008-09-05  
Seq
2008-0383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2351 361 CVE-2008-0383 http://community.mybboard.net/showthread.php?tid=27227  View
2352 361 CVE-2008-0383 3558  View
2353 361 CVE-2008-0383 20080116 [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10  View
2354 361 CVE-2008-0383 27323  View
2355 361 CVE-2008-0383 http://www.waraxe.us/advisory-62.html  View
2356 361 CVE-2008-0383 mybb-moderationphp-sql-injection(39728)  View
2357 361 CVE-2008-0383 mybb-usergroups-sql-injection(39729)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48662 JVNDB-2008-003972 MyBB における SQL インジェクションの脆弱性 MyBB には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0383 30496 CVE-2008-0383 361 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003972.html 2008-01-22 2012-09-25 View