Description

Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user['language'] variable, probably related to SQL injection.

Remediation

References

CVE-2008-3070

Related Vulnerabilities

MySQL CVE-2022-39402 Vulnerability (CVE-2022-39402)

WordPress Plugin Facebook Button by BestWebSoft Cross-Site Scripting (2.33)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5056)

WordPress Plugin Sendit WP Newsletter 'id' Parameter SQL Injection (2.1.0)

WordPress Plugin Helpful Security Bypass (4.5.14)

Severity

High

Classification

CVE-2008-3070

Tags

Missing Update Known Vulnerabilities