SQL Injection in Mybb

CVE-2014-9240

SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the question_id parameter in a do_register action.

Vulnerability class: SQL Injection

EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.

Affected products

  • Mybb — versions 1.8.0, 1.8.1
  • N/a — versions n/a

Weakness classification (CWE)

References