CVE:CVE-2006-3243
CNNVD:CNNVD-200606-514
MyBB (MyBulletinBoard) 1.0至1.1.3的usercp.php中的SQL注入漏洞。远程攻击者通过showcodebuttons参数执行任意SQL命令。
solution:Upgrade mybulletinboard mybulletinboard to a higher version than 1.0.1,1.0.2,1.0.3,1.0.4,1.0_final,1.0_pr2,1.0_preview_release_2,1.00_rc1,1.00_rc2,1.0_rc2,1.00_rc3,1.0_rc4,1.00_rc4,1.00_rc4_security_patch,1.01,1.1,1.1.1,1.1.2,1.1.3,1.04,and avoid the version 1.0.1,1.0.2,1.0.3,1.0.4,1.0_final,1.0_pr2,1.0_preview_release_2,1.00_rc1,1.00_rc2,1.0_rc2,1.00_rc3,1.0_rc4,1.00_rc4,1.00_rc4_security_patch,1.01,1.1,1.1.1,1.1.2,1.1.3,1.04