CVE-2008-0383: SQL Injection
Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a domergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a domultimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0383?
CVE-2008-0383 is considered a high severity vulnerability due to its SQL injection capabilities.
How can I fix CVE-2008-0383?
To fix CVE-2008-0383, upgrade MyBB to version 1.2.11 or later, which addresses these SQL injection vulnerabilities.
What versions of MyBB are affected by CVE-2008-0383?
CVE-2008-0383 affects MyBB versions 1.2.10 and earlier.
Who can exploit the CVE-2008-0383 vulnerability?
The CVE-2008-0383 vulnerability can be exploited by remote moderators and administrators with access to specific actions.
What types of attacks can be performed due to CVE-2008-0383?
CVE-2008-0383 allows attackers to execute arbitrary SQL commands, leading to potential data manipulation or leakage.