NVD

Id
69797  
Name
CVE-2005-4199  
Description
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) showcodebuttons in an options action in usercp.php; (6) list parameter in an editlists action to usercp.php; (7) rating parameter in a rate action in member.php; and (8) rating parameter in either showthread.php or ratethread.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-13  
Modified Date
2011-09-08  
Seq
2005-4199  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360690 69797 CVE-2005-4199 20051209 [TKPN2005-12-001] Multiple critical vulnerabilities in MyBB  View
360691 69797 CVE-2005-4199 http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964  View
360692 69797 CVE-2005-4199 246  View
360693 69797 CVE-2005-4199 294  View
360694 69797 CVE-2005-4199 1015407  View
360695 69797 CVE-2005-4199 20051209 [TKPN2005-12-001] Multiple critical vulnerabilities in MyBB  View
360696 69797 CVE-2005-4199 20051223 [TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB  View
360697 69797 CVE-2005-4199 15793  View
360698 69797 CVE-2005-4199 http://www.trapkit.de/advisories/TKADV2005-12-001.txt  View
360699 69797 CVE-2005-4199 http://www.trapkit.de/advisories/TKPN2005-12-001.txt  View
360700 69797 CVE-2005-4199 ADV-2005-2842  View

Related JVN