CVE Feed

    Dashboard / CVE / CVE-2005-4199

    CVE-2005-4199

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) showcodebuttons in an options action in usercp.php; (6) list parameter in an editlists action to usercp.php; (7) rating parameter in a rate action in member.php; and (8) rating parameter in either showthread.php or ratethread.php.

    Published:Dec 13, 2005
    Last Modified:Apr 16, 2026
    EPS:Dec 13, 2005
    EPSS Score:0.01714
    CVSS Score:7.5

    Affected Products

    Vendor
    Mybb
    Product
    Mybb

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-45118 (CVSS 9.3) — MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect …
    CVE-2026-45117 (CVSS 9.8) — MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly …
    CVE-2026-45129 (CVSS 4.6) — MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Recovery Codes module does not vali…
    CVE-2026-45124 (CVSS 4.3) — MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissi…
    CVE-2026-45120 (CVSS 5.4) — MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not verify private even…
    CVE-2026-47245 (CVSS 4.3) — MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not…
    CVE-2026-45734 (CVSS 5.3) — MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enfor…
    CVE-2026-45125 (CVSS 5.3) — MyBB is free and open source forum software. Prior to 1.8.40, the Email User controller does not sanitize send…
    CVE-2026-45122 (CVSS 4.3) — MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not validate moderation…
    CVE-2026-45119 (CVSS 4.6) — MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not va…

    References

    http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0379.html
    http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964
    http://secunia.com/advisories/18000
    http://securityreason.com/securityalert/246
    http://securityreason.com/securityalert/294
    http://securitytracker.com/id?1015407
    http://www.osvdb.org/22156
    http://www.osvdb.org/22157
    http://www.osvdb.org/22158
    http://www.securityfocus.com/archive/1/419067/100/0/threaded
    http://www.securityfocus.com/archive/1/420159/100/0/threaded
    http://www.securityfocus.com/bid/15793
    http://www.trapkit.de/advisories/TKADV2005-12-001.txt
    http://www.trapkit.de/advisories/TKPN2005-12-001.txt
    http://www.vupen.com/english/advisories/2005/2842
    http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0379.html
    http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964
    http://secunia.com/advisories/18000
    http://securityreason.com/securityalert/246
    http://securityreason.com/securityalert/294
    http://securitytracker.com/id?1015407
    http://www.osvdb.org/22156
    http://www.osvdb.org/22157
    http://www.osvdb.org/22158
    http://www.securityfocus.com/archive/1/419067/100/0/threaded
    http://www.securityfocus.com/archive/1/420159/100/0/threaded
    http://www.securityfocus.com/bid/15793
    http://www.trapkit.de/advisories/TKADV2005-12-001.txt
    http://www.trapkit.de/advisories/TKPN2005-12-001.txt
    http://www.vupen.com/english/advisories/2005/2842

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High