CVE-2008-0382

Published: Jan 22, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php.

Affected (19)

Products: Mybulletinboard: Mybulletinboard

Mybulletinboard

1 product

Mybulletinboard

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Mybulletinboard Mybulletinboard	Version 1.0.1
Mybulletinboard Mybulletinboard	Version 1.0.2
Mybulletinboard Mybulletinboard	Version 1.0.3
Mybulletinboard Mybulletinboard	Version 1.0.4
Mybulletinboard Mybulletinboard	Version 1.0
Mybulletinboard Mybulletinboard	Version 1.0_pr2
Mybulletinboard Mybulletinboard	Version 1.1.1
Mybulletinboard Mybulletinboard	Version 1.1.2
Mybulletinboard Mybulletinboard	Version 1.1.3
Mybulletinboard Mybulletinboard	Version 1.1.4
Mybulletinboard Mybulletinboard	Version 1.1.5
Mybulletinboard Mybulletinboard	Version 1.1.7
Mybulletinboard Mybulletinboard	Version 1.1.8
Mybulletinboard Mybulletinboard	Version 1.10
Mybulletinboard Mybulletinboard	Version 1.1
Mybulletinboard Mybulletinboard	Version 1.2.10
Mybulletinboard Mybulletinboard	Version 1.2.3
Mybulletinboard Mybulletinboard	Version 1.2.5
Mybulletinboard Mybulletinboard	Version 1.2