← Database

CVE-2022-43709

MEDIUM CVSS: 4.9 Published: 2022-11-22 Modified: 2026-06-17

Description

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.

Affected Platforms

Mybb Mybb

Weakness Type

CWE-89, CWE-79

References