Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn't lead to an SQL injection, it does provide a general MyBB SQL error.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyBB ‘keywords’参数多个SQL注入漏洞
Vulnerability Description
MyBB（又名MyBulletinBoard）是MyBB团队开发的一套用PHP和MySQL开发的免费且基于Web的论坛软件。该软件具有简单易用、支持多国语言、可扩展等特点。 MyBB中的keywords参数中存在多个SQL注入漏洞，这些漏洞源于对用户提供的输入使用SQL查询之前没有充分的验证。攻击者利用这些漏洞控制应用程序，访问或修改数据，或利用底层数据库中潜在的漏洞。MyBB 1.6版本中存在漏洞，其他版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A