CVE-2006-3775: SQL Injection
SQL injection vulnerability in the init function in classsession.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($SERVER['HTTPCLIENTIP'] variable), as utilized by index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3775?
CVE-2006-3775 has a moderate severity level due to the potential for remote SQL injection attacks.
How do I fix CVE-2006-3775?
To fix CVE-2006-3775, upgrade MyBB to version 1.1.6 or later which addresses this vulnerability.
What systems are affected by CVE-2006-3775?
CVE-2006-3775 specifically affects MyBB version 1.1.5.
Can CVE-2006-3775 allow attackers to gain unauthorized access?
Yes, CVE-2006-3775 allows attackers to execute arbitrary SQL commands which may lead to unauthorized access or manipulation of the database.
How can I detect if my system is vulnerable to CVE-2006-3775?
You can detect vulnerability to CVE-2006-3775 by checking for the presence of MyBB version 1.1.5 and reviewing application logs for unusual SQL queries.