Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

MyBulletinBoard 1.0 RC4 lets attackers run database commands

CVE-2005-1833 · published 21 years ago
Summary

The MyBulletinBoard forum software version 1.0 RC4 can be tricked into executing unauthorized database queries. An attacker can send specially crafted requests to various pages and manipulate the site's data, potentially exposing or altering information. Update to a newer version of MyBulletinBoard or apply the provided security patches to stop this behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mybulletinboard mybulletinboard <= 1.00_rc4
cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*
Original advisory text
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to ...
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published31 May 2005
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2005-1833 · NVD
Track software like this
Free during beta