CVE-2010-5096

Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn't lead to an SQL injection, it does provide a general MyBB SQL error.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.58% chance of exploitation in the next 30 days, 92th percentile

Published

2012-08-13

Updated

2024-09-17

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/35141
• https://www.exploit-db.com/exploits/35140

References

• CVE Record
• NVD entry

Related

• CVE-2010-5086
• CVE-2010-5099
• CVE-2010-5083
• CVE-2010-5106
• CVE-2010-5081
• CVE-2010-5193