First published: Thu Feb 10 2005(Updated: )
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mybulletinboard Mybulletinboard | =1.0_rc4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0282 is considered to be of medium severity due to the potential for SQL injection attacks.
To fix CVE-2005-0282, you should sanitize user inputs and use prepared statements to prevent SQL injection.
CVE-2005-0282 affects MyBulletinBoard version 1.0_rc4.
Yes, CVE-2005-0282 allows remote attackers to exploit the vulnerability through the uid parameter.
CVE-2005-0282 can be exploited to execute arbitrary SQL commands on the database.