CVE-2006-0219

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-16 · updated 2026-06-16

Description

The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php.

Affected products

Mybulletinboard: 1.0.2, 1.0_final, 1.0_preview_release_2, 1.01

References

http://community.mybboard.net/showthread.php?tid=5853&pid=35088#pid35088
http://community.mybboard.net/showthread.php?tid=5853&pid=35151#pid35151
http://community.mybboard.net/showthread.php?tid=5960
http://www.securityfocus.com/bid/16230
https://exchange.xforce.ibmcloud.com/vulnerabilities/24115
http://community.mybboard.net/showthread.php?tid=5853&pid=35088#pid35088
http://community.mybboard.net/showthread.php?tid=5853&pid=35151#pid35151
http://community.mybboard.net/showthread.php?tid=5960
http://www.securityfocus.com/bid/16230
https://exchange.xforce.ibmcloud.com/vulnerabilities/24115

Get alerted when CVE-2006-0219 or the next vulnerability affects your stack