CVE-2006-2103: SQL Injection

Published Apr 29, 2006

Updated

SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the (1) query string ($querystring variable) in (a) admin/adminlogs.php, which is not properly handled by adminfunctions.php; or (2) setid, (3) expand, (4) title, or (5) sid2 parameters to (b) admin/templates.php.

Affected Software

1 affected component

MyBulletinBoard MyBulletinBoard=1.1.1

Event History

Apr 29, 2006

CVE Published

10:02 AM

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2103?

CVE-2006-2103 is rated as a medium severity vulnerability due to its potential for unauthorized SQL command execution.

How do I fix CVE-2006-2103?

To fix CVE-2006-2103, upgrade MyBB to the latest version that addresses this SQL injection vulnerability.

What systems are affected by CVE-2006-2103?

CVE-2006-2103 specifically affects MyBB version 1.1.1.

Can CVE-2006-2103 be exploited by an unauthenticated user?

No, CVE-2006-2103 requires remote authenticated administrators to exploit the SQL injection vulnerability.

What are the potential impacts of CVE-2006-2103?

The exploitation of CVE-2006-2103 could lead to unauthorized access to sensitive data and full control over the MyBB database.