CVE-2005-4602: SQL Injection
First published: Sat Dec 31 2005(Updated: )
SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybulletinboard | =1.0_pr2 | |
| Mybulletinboard | =1.00_rc1 | |
| Mybulletinboard | =1.00_rc2 | |
| Mybulletinboard | =1.00_rc3 | |
| Mybulletinboard | =1.0_rc4 | |
| Mybulletinboard | =1.00_rc4 | |
| Mybulletinboard | =1.00_rc4_security_patch | |
| Mybulletinboard | =rc1 | |
| Mybulletinboard | =rc2 | |
| Mybulletinboard | =rc3 | |
| Mybulletinboard | =rc4 | |
| Mybulletinboard | =1.0_rc4 | |
| Mybulletinboard | =1.00_rc4 | |
| Mybulletinboard | =rc3 | |
| Mybulletinboard | =1.00_rc3 | |
| Mybulletinboard | =rc2 | |
| Mybulletinboard | =rc1 | |
| Mybulletinboard | =1.00_rc4_security_patch | |
| Mybulletinboard | =1.00_rc1 | |
| Mybulletinboard | =rc4 | |
| Mybulletinboard | =1.0_pr2 | |
| Mybulletinboard | =1.00_rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-4602?
CVE-2005-4602 is classified as a medium severity vulnerability due to the potential for SQL injection, allowing unauthorized access to the database.
How do I fix CVE-2005-4602?
To fix CVE-2005-4602, upgrade MyBB to version 1.0.1 or later that includes the security patch addressing this vulnerability.
What systems are affected by CVE-2005-4602?
CVE-2005-4602 affects MyBB versions prior to 1.0.1, specifically including 1.0_rc1, 1.0_rc2, 1.0_rc3, and 1.0_rc4.
What type of attack can exploit CVE-2005-4602?
CVE-2005-4602 can be exploited through SQL injection, allowing attackers to execute arbitrary SQL commands via manipulated file attachments.
Is CVE-2005-4602 a known vulnerability?
Yes, CVE-2005-4602 has been documented and is a known vulnerability in earlier versions of MyBB.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/mybulletinboard
- canonical/mybulletinboard
- version/mybulletinboard/1.0_pr2
- version/mybulletinboard/1.00_rc1
- version/mybulletinboard/1.00_rc2
- version/mybulletinboard/1.00_rc3
- version/mybulletinboard/1.0_rc4
- version/mybulletinboard/1.00_rc4
- version/mybulletinboard/1.00_rc4_security_patch
- version/mybulletinboard/rc1
- version/mybulletinboard/rc2
- version/mybulletinboard/rc3
- version/mybulletinboard/rc4