Beveiligingsadvies

CVE-2007-2212

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-04-24 20:00:00
Laatst bijgewerkt 2024-08-07 13:23:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.