CVE-2006-0218

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php, and (6) usercp.php, and probably related to SQL injection. NOTE: it is likely that this issue subsumes CVE-2005-4602 and CVE-2005-4603. However, since the vendor advisory is vague and additional files are mentioned, is is likely that this contains at least one distinct vulnerability from CVE-2005-4602 and CVE-2005-4603.

• http://community.mybboard.net/showthread.php?tid=5852Patch, Vendor Advisory
• http://community.mybboard.net/showthread.php?tid=5852Patch, Vendor Advisory

Published

Jan 16, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0212Directory traversal vulnerability in OBEX Push services in T…
• CVE-2006-0213Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-2…
• CVE-2006-0214Eval injection vulnerability in ezDatabase 2.0 and earlier a…
• CVE-2006-0215Cross-site scripting (XSS) vulnerability in admin.php in Qua…
• CVE-2006-0216admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 a…
• CVE-2006-0217Multiple cross-site scripting (XSS) vulnerabilities in Ultim…
• CVE-2006-0219The original distribution of MyBulletinBoard (MyBB) to updat…
• CVE-2006-0220Multiple cross-site scripting (XSS) vulnerabilities in DCP-P…
• CVE-2006-0221SQL injection vulnerability in index.asp in the Admin Panel …
• CVE-2006-0222Cross-site scripting (XSS) vulnerability in fullview.php in …
• CVE-2006-0223Directory traversal vulnerability in Shanghai TopCMM 123 Fla…
• CVE-2006-0224Buffer overflow in Library of Assorted Spiffy Things (LibAST…