Approved changes feed: RSS · Atom

cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*

part: a version: rc4 update: *

VendorMybulletinboard (826d6424-6ac6-5b83-87d5-a7f10507c0ac)
ProductMybulletinboard (0445816e-130d-56bc-8826-c9b680c1c829)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0787 vulnerable 2026-06-08 04:50:17.796166 Details available
SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php.
Published: 2008-02-15T00:00:00.000Z
Updated: 2024-08-07T08:01:38.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1282 vulnerable 2026-06-08 04:48:56.786507 Details available
CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
Published: 2006-03-19T11:00:00.000Z
Updated: 2024-08-07T17:03:28.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1281 vulnerable 2026-06-08 04:48:56.785827 Details available
Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable.
Published: 2006-03-19T11:00:00.000Z
Updated: 2024-08-07T17:03:28.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4603 vulnerable 2026-06-08 04:48:44.313652 Details available
Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.
Published: 2006-01-02T00:00:00.000Z
Updated: 2024-08-07T23:53:28.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4602 not_vulnerable 2026-06-08 04:48:44.311290 Details available
SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment.
Published: 2006-01-02T00:00:00.000Z
Updated: 2024-08-07T23:53:28.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4200 vulnerable 2026-06-08 04:48:43.224515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3326 vulnerable 2026-06-08 04:48:40.368396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2778 vulnerable 2026-06-08 04:48:30.507876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.