SQL Injection in Mybb

CVE-2012-2325

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.010 (60.7th percentile) — read the EPSS interpretation.

Affected products

Mybb — versions 1.00, 1.0, 1.01
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert@redhat.com (mailing-list, x_refsource_MLIST)