CVE-2009-2230
Published Jun 26, 2009
Last updated 7 years ago
Overview
- Description
- SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8605C19E-93AA-4344-9F02-18D6042D3310",
"versionEndIncluding": "1.4.6"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "858E3AD8-8A7C-4B33-A2AA-3C543D46E35C"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F3B187F-D0C5-4001-B877-3B0122784BB2"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D04152D8-60BE-4362-BF68-688DE53A066C"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98789943-2C7D-404E-B61E-04C436C1681C"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "678B50B3-D151-40ED-8CAA-C12FC5BA4520"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64E11CB6-E5E5-42CF-A2A4-B1DD3ABADBAD"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59C3A929-B608-42FC-BB31-7599146E8CB6"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F4409B6-9F4D-4136-BA74-43736215A122"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D70B64CF-6EF1-487A-9617-68F904ACE727"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94EC0E67-111A-4989-A311-6B051D37CEE0"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F962969-76AF-4CB2-BD20-A02D703B01C9"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6942A9C-55E6-4A87-903F-3C8314EA4EA5"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DC39A88-9F34-4119-8404-8495735290DE"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A15A18B-E4DB-4622-977B-3AA495E2F39A"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4494C452-BB14-4180-A26E-572752FA6111"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6FD3E97-2E37-4FE3-83A7-13E489BDFF0C"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8C6BC25-C1BB-4640-9CC5-F10C0C119C63"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04247BE7-8EF5-4A9C-AD27-F29611FA4A4E"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9593588E-1FCC-42E0-9E8D-0A96386C3126"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66A6AF1A-7099-4987-AB45-DA363F29327C"
},
{
"criteria": "cpe:2.3:a:mybulletinboard:mybulletinboard:1.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29F3FD0D-25AB-4D1B-871C-2545FD13EA76"
}
],
"operator": "OR"
}
]
}
]