CVE-2021-27947: SQL Injection
First published: Mon Mar 15 2021(Updated: )
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | <1.8.26 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this SQL Injection vulnerability?
The vulnerability ID for this SQL Injection vulnerability is CVE-2021-27947.
What software version is affected by this vulnerability?
MyBB versions up to and excluding 1.8.26 are affected by this vulnerability.
How severe is the vulnerability CVE-2021-27947?
The severity of the vulnerability CVE-2021-27947 is high, with a CVSS score of 7.2.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-89.
How can I fix the SQL Injection vulnerability CVE-2021-27947 in MyBB?
To fix the SQL Injection vulnerability CVE-2021-27947 in MyBB, update to version 1.8.26 or later.
- collector/nvd-index
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/event
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mybb
- canonical/mybb mybb