CVE-2012-2325: SQL Injection
Published Aug 13, 2012
·Updated
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Affected Software
62 affected components
Mybb Mybb<=1.6.6
Mybb Mybb=1.00
Mybb Mybb=1.0-beta4
Mybb Mybb=1.0-pr1
Mybb Mybb=1.0-pr2
Mybb Mybb=1.0-rc1
Mybb Mybb=1.0-rc2
Mybb Mybb=1.0-rc3
Mybb Mybb=1.0-rc4
Mybb Mybb=1.01
Mybb Mybb=1.1.0
Mybb Mybb=1.1.1
Mybb Mybb=1.1.2
Mybb Mybb=1.1.3
Mybb Mybb=1.1.4
Mybb Mybb=1.1.5
Mybb Mybb=1.1.6
Mybb Mybb=1.1.7
Mybb Mybb=1.1.8
Mybb Mybb=1.02
Mybb Mybb=1.2.0
Mybb Mybb=1.2.1
Mybb Mybb=1.2.2
Mybb Mybb=1.2.3
Mybb Mybb=1.2.4
Mybb Mybb=1.2.5
Mybb Mybb=1.2.6
Mybb Mybb=1.2.7
Mybb Mybb=1.2.8
Mybb Mybb=1.2.9
Mybb Mybb=1.2.10
Mybb Mybb=1.2.11
Mybb Mybb=1.2.12
Mybb Mybb=1.2.13
Mybb Mybb=1.2.14
Mybb Mybb=1.03
Mybb Mybb=1.3-pre-1.0
Mybb Mybb=1.04
Mybb Mybb=1.4.0
Mybb Mybb=1.4.1
Mybb Mybb=1.4.2
Mybb Mybb=1.4.3
Mybb Mybb=1.4.4
Mybb Mybb=1.4.5
Mybb Mybb=1.4.6
Mybb Mybb=1.4.7
Mybb Mybb=1.4.8
Mybb Mybb=1.4.9
Mybb Mybb=1.4.10
Mybb Mybb=1.4.11
Mybb Mybb=1.4.12
Mybb Mybb=1.4.13
Mybb Mybb=1.4.14
Mybb Mybb=1.4.15
Mybb Mybb=1.4.16
Mybb Mybb=1.5.1
Mybb Mybb=1.5.2
Mybb Mybb=1.6.1
Mybb Mybb=1.6.2
Mybb Mybb=1.6.3
Mybb Mybb=1.6.4
Mybb Mybb=1.6.5
Remediation
Event History
Aug 13, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description