NuytsTech Security

CVE-2009-2230

by ·

SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.

Date published : 2009-06-26

http://www.securityfocus.com/bid/35458

http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/

Tags: