CVE-2007-2212: SQL Injection
Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2212?
CVE-2007-2212 is classified as a high severity vulnerability due to its potential for remote SQL injection leading to unauthorized access or data manipulation.
How do I fix CVE-2007-2212?
To fix CVE-2007-2212, upgrade MyBB to version 1.2.6 or later, as these versions contain patches for the SQL injection vulnerabilities.
What types of attacks can CVE-2007-2212 facilitate?
CVE-2007-2212 can facilitate various SQL injection attacks, allowing attackers to execute arbitrary SQL commands against the database.
Which versions of MyBB are affected by CVE-2007-2212?
CVE-2007-2212 affects MyBB version 1.2.5 and earlier releases.
Is there a patch available for CVE-2007-2212?
There is no standalone patch for CVE-2007-2212; you must upgrade to a non-vulnerable version of MyBB to mitigate the risk.