CVE-2006-3243

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.

Date published : 2006-06-27

http://www.securityfocus.com/archive/1/438209

http://community.mybboard.net/showthread.php?tid=9955