Vulnerabilities (CVE)

Filtered by vendor Mybulletinboard Subscribe
Filtered by product Mybulletinboard
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-2580 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php.
CVE-2006-3953 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.
CVE-2005-3777 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 5.0 MEDIUM N/A
MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.