CVE-2006-1974: SQL Injection
Published Apr 21, 2006
·Updated
SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter.
Affected Software
8 affected components
MyBulletinBoard MyBulletinBoard=1.0_final
MyBulletinBoard MyBulletinBoard=1.0_rc4
MyBulletinBoard MyBulletinBoard=1.0.3
MyBulletinBoard MyBulletinBoard=1.0_pr2
MyBulletinBoard MyBulletinBoard=1.0.1
MyBulletinBoard MyBulletinBoard=1.0.2
MyBulletinBoard MyBulletinBoard=1.0_rc2
MyBulletinBoard MyBulletinBoard=1.0_preview_release_2
Event History
Apr 21, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1974?
CVE-2006-1974 is considered a critical vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2006-1974?
To fix CVE-2006-1974, it is recommended to upgrade MyBB to version 1.04 or later.
3
What versions of MyBB are affected by CVE-2006-1974?
CVE-2006-1974 affects MyBB versions prior to 1.04, including 1.0_final, 1.0_rc4, and several earlier releases.
4
What type of vulnerability is CVE-2006-1974?
CVE-2006-1974 is classified as an SQL injection vulnerability.
5
What can attackers do with CVE-2006-1974?
Attackers exploiting CVE-2006-1974 can execute arbitrary SQL commands, potentially compromising the database.