CVE-2006-0638

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-10 · updated 2026-06-16

Description

SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter.

Affected products

Mybulletinboard: 1.0.3

References

http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html
http://secunia.com/advisories/18754
http://www.osvdb.org/22957
http://www.securityfocus.com/archive/1/424335/100/0/threaded
http://www.securityfocus.com/bid/16538
http://www.vupen.com/english/advisories/2006/0475
http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html
http://secunia.com/advisories/18754
http://www.osvdb.org/22957
http://www.securityfocus.com/archive/1/424335/100/0/threaded
http://www.securityfocus.com/bid/16538
http://www.vupen.com/english/advisories/2006/0475

Get alerted when CVE-2006-0638 or the next vulnerability affects your stack