← Database

CVE-2008-0382

HIGH CVSS: 7.5 Published: 2008-01-22 Modified: 2026-06-16

Description

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php.

Affected Platforms

Mybulletinboard Mybulletinboard

Weakness Type

CWE-94

References