CVE-2008-3965: SQL Injection
Published Sep 10, 2008
·Updated
SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field.
Affected Software
30 affected components
Mybb Mybb=1.2.10
Mybb Mybb=1.2.8
Mybb Mybb=1.04
Mybb Mybb=1.1.1
Mybb Mybb=1.1.3
Mybb Mybb=1.2.2
Mybb Mybb<=1.4.0
Mybb Mybb=1.2.9
Mybb Mybb=1.2.1
Mybb Mybb=1.01
Mybb Mybb=1.1.6
Mybb Mybb=1.2.6
Mybb Mybb=1.2.0
Mybb Mybb=1.02
Mybb Mybb=1.2.5
Mybb Mybb=1.1.8
Mybb Mybb=1.2.11
Mybb Mybb=1.1.5
Mybb Mybb=1.2.13
Mybb Mybb=1.1.0
Mybb Mybb=1.2.3
Mybb Mybb=1.2.7
Mybb Mybb=1.1.7
Mybb Mybb=1.1.4
Mybb Mybb=1.03
Mybb Mybb=1.00
Mybb Mybb=1.2.4
Mybb Mybb=1.2
Mybb Mybb=1.2.12
Mybb Mybb=1.1.2
Event History
Sep 10, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3965?
CVE-2008-3965 has a medium severity rating, indicating a moderate risk to affected systems.
2
How do I fix CVE-2008-3965?
To fix CVE-2008-3965, upgrade MyBB to version 1.4.1 or later.
3
Which versions of MyBB are affected by CVE-2008-3965?
CVE-2008-3965 affects MyBB versions prior to 1.4.1.
4
What type of vulnerability is CVE-2008-3965?
CVE-2008-3965 is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
5
Can CVE-2008-3965 lead to data compromise?
Yes, CVE-2008-3965 can lead to data compromise as it allows attackers to manipulate the database through SQL commands.