CVE-2007-1963: SQL Injection
SQL injection vulnerability in the createsession function in classsession.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1963?
The severity of CVE-2007-1963 is classified as high due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2007-1963?
To fix CVE-2007-1963, it is recommended to upgrade MyBB to version 1.2.4 or later where the vulnerability is patched.
What systems are affected by CVE-2007-1963?
CVE-2007-1963 affects MyBB 1.2.3 and earlier versions.
What type of vulnerability is CVE-2007-1963?
CVE-2007-1963 is an SQL injection vulnerability that exploits the create_session function in class_session.php.
Can CVE-2007-1963 be exploited remotely?
Yes, CVE-2007-1963 can be exploited remotely through manipulation of the Client-IP HTTP header.