CVE-2006-2336: SQL Injection
Published May 12, 2006
·Updated
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter.
Affected Software
1 affected component
MyBulletinBoard MyBulletinBoard=1.1.1
Event History
May 12, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2336?
CVE-2006-2336 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2006-2336?
To fix CVE-2006-2336, it is recommended to update MyBB to version 1.1.2 or later which addresses this vulnerability.
3
What types of attacks could be performed using CVE-2006-2336?
Attackers exploiting CVE-2006-2336 can execute arbitrary SQL commands, potentially compromising the database.
4
Which software versions are affected by CVE-2006-2336?
CVE-2006-2336 affects MyBB version 1.1.1 specifically.
5
Is CVE-2006-2336 still a threat today?
While CVE-2006-2336 is an older vulnerability, any unpatched installations of MyBB 1.1.1 remain at risk.