Description

Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Remediation

References

CVE-2007-2212

Related Vulnerabilities

Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-29933)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33945)

Joomla Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-10238)

jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183)

Moodle Incorrect Authorization Vulnerability (CVE-2021-20283)

Severity

High

Classification

CVE-2007-2212

Tags

Missing Update Known Vulnerabilities