CVE:CVE-2007-1963
CNNVD:CNNVD-200704-194
MyBB (又称MyBulletinBoard)的class_session.php中的create_session函数存在SQL注入漏洞。远程攻击者可以借助Client-IP HTTP标头，执行任意的SQL指令。
solution:Upgrade mybb mybb to a higher version than 1.2.3,and avoid the version (,1.2.3]; Upgrade mybulletinboard mybulletinboard to a higher version than 1.2.3,and avoid the version (,1.2.3]