CVE-2005-1833 - CVE House

Back to Database

Status published High CVE-2005-1833

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow...

7.5 CVSS

Vulnerability Description

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1833

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from mybulletinboard

View All →

SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before...

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows...

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow...

SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5...

Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard)...

Affected Vendor

mybulletinboard

View all reports →

Affected Software

mybulletinboard

Vulnerable Versions:

0

Timeline

Official Publish: June 2nd, 2005

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.