NVD

Id
58959  
Name
CVE-2006-0219  
Description
The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-16  
Modified Date
2008-09-05  
Seq
2006-0219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302760 58959 CVE-2006-0219 http://community.mybboard.net/showthread.php?tid=5853&pid=35088#pid35088  View
302761 58959 CVE-2006-0219 http://community.mybboard.net/showthread.php?tid=5853&pid=35151#pid35151  View
302762 58959 CVE-2006-0219 http://community.mybboard.net/showthread.php?tid=5960  View
302763 58959 CVE-2006-0219 16230  View
302764 58959 CVE-2006-0219 mybb-usercp-script-sql-injection(24115)  View

Related JVN