CVE-2008-0787: SQL Injection
SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0787?
CVE-2008-0787 is considered a high severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2008-0787?
To fix CVE-2008-0787, upgrade MyBB to version 1.2.12 or later, which contains the necessary security patches.
Who is affected by CVE-2008-0787?
CVE-2008-0787 affects all MyBB versions prior to 1.2.12, including versions 1.10, 1.1.1, and earlier versions.
What types of attacks can CVE-2008-0787 facilitate?
CVE-2008-0787 can facilitate SQL injection attacks, which may compromise database integrity and expose sensitive data.
Are there any mitigations for CVE-2008-0787 before applying a patch?
While applying the patch is the best solution, temporarily restrict access to the affected functionality or monitor for anomalous behavior as a mitigation.