GCVE - cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Mybulletinboard (`826d6424-6ac6-5b83-87d5-a7f10507c0ac`)
Product	Mybulletinboard (`0445816e-130d-56bc-8826-c9b680c1c829`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2230`	vulnerable	2026-06-08 04:51:27.343776	Details available SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter. Published: 2009-06-26T18:00:00.000Z Updated: 2024-08-07T05:44:55.451Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35458 http://www.exploit-db.com/exploits/9001 http://secunia.com/advisories/35517 http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/ http://mybboard.net/download/104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0787`	vulnerable	2026-06-08 04:50:17.790489	Details available SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the options[disablesmilies] parameter to private.php. Published: 2008-02-15T00:00:00.000Z Updated: 2024-08-07T08:01:38.909Z Open on db.gcve.eu Reference links http://www.waraxe.us/advisory-64.html http://www.securityfocus.com/bid/27378 http://secunia.com/advisories/28572/ http://www.securityfocus.com/archive/1/486763/100/200/threaded http://community.mybboard.net/showthread.php?tid=27675	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0382`	vulnerable	2026-06-08 04:50:10.877094	Details available Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php. Published: 2008-01-22T19:00:00.000Z Updated: 2024-08-07T07:46:55.095Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/4928 http://secunia.com/advisories/28509 http://www.securityfocus.com/archive/1/486434/100/0/threaded http://www.securityfocus.com/bid/27322 https://www.exploit-db.com/exploits/4927	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Mybulletinboard

Notes

PURL mappings

Vulnerability references

Contribute