CVE-2006-3243

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-27 · updated 2026-06-16

Description

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.

Affected products

Mybulletinboard: 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0_final, 1.0_pr2 (+14)

References

http://community.mybboard.net/showthread.php?tid=9955
http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html
http://secunia.com/advisories/20795
http://securityreason.com/securityalert/1147
http://www.securityfocus.com/archive/1/438209
http://www.vupen.com/english/advisories/2006/2511
https://exchange.xforce.ibmcloud.com/vulnerabilities/27410
http://community.mybboard.net/showthread.php?tid=9955
http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html
http://secunia.com/advisories/20795
http://securityreason.com/securityalert/1147
http://www.securityfocus.com/archive/1/438209

Get alerted when CVE-2006-3243 or the next vulnerability affects your stack