CVE-2005-2888: SQL Injection

Published Sep 14, 2005

Updated

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.

Affected Software

2 affected components

MyBulletinBoard MyBulletinBoard=preview_release_2

Event History

Sep 14, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2888?

CVE-2005-2888 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2005-2888?

To fix CVE-2005-2888, update MyBulletinBoard to a version that has mitigated these SQL injection vulnerabilities.

What software is affected by CVE-2005-2888?

CVE-2005-2888 affects MyBulletinBoard Preview Release 2.

Can CVE-2005-2888 be exploited remotely?

Yes, CVE-2005-2888 can be exploited remotely by attackers using SQL injection techniques.

What are the attack vectors for CVE-2005-2888?

The attack vectors for CVE-2005-2888 include the fid parameter in misc.php and the Content-Disposition field in the HTTP header to newreply.php.