MyBulletinBoard "uid" SQL Injection Vulnerability - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

MyBulletinBoard "uid" SQL Injection Vulnerability

Secunia Advisory:	SA13722
Release Date:	2005-01-05
Last Update:	2005-09-05

Critical:	Moderately critical
Impact:	Manipulation of data
Where:	From remote
Solution Status:	Vendor Patch

Software:	MyBB (formerly MyBulletinBoard) 1.x

CVE reference:	CVE-2005-0282 (Secunia mirror) CVE-2005-2697 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been discovered in MyBulletinBoard, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "uid" parameter in "member.php" and "search.php" isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation requires that "magic_quotes_gpc" is disabled. The vulnerability has been confirmed in version 1.00 RC4. Other versions may also be affected. Solution: Update to MyBB Preview Release 2. http://www.mybboard.com/downloads.php Provided and/or discovered by: Originally discovered by: scottm Additional information provided by: abducter Changelog: 2005-02-14: Added CVE reference. 2005-07-28: Added additional information provided by abducter. Updated "Description" section. 2005-09-02: Updated "Solution" section. 2005-09-05: Added CVE reference.



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

33 Related Secunia Security Advisories, displaying 10

1. MyBB SQL Injection and Cross-Site Request Forgery Vulnerabilities

2. MyBB PHP Code Execution and SQL Injection Vulnerabilities

3. MyBB "day" SQL Injection Vulnerability

4. MyBB "Client-IP" SQL Injection and Code Execution

5. MyBB private.php Cross-Site Request Forgery and Cross-Site Scripting

6. MyBB Cross-Site Scripting Vulnerabilities

7. MyBB Cross-Site Scripting and Script Insertion Vulnerabilities

8. MyBB Avatar / Attachment Script Insertion Vulnerability

9. MyBB "avatarurl" Script Insertion Vulnerability

10. MyBB "CLIENT-IP" SQL Injection Vulnerability

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Pet Grooming Management System "useradded.php" Security Bypass

3.	W1L3D4 Philboard Multiple SQL Injection Vulnerabilities

4.	Symantec Altiris Deployment Solution Multiple Vulnerabilities

5.	Interspire ActiveKB Admin Interface Cookie Security Bypass

6.	68 Classifieds "cat" SQL Injection Vulnerability

7.	Debian update for gforge

8.	GForge Insecure Temporary Files

9.	e107 BLOG Engine Plugin "rid" SQL Injection

10.	Linux Kernel Multiple Vulnerabilities