CVE-2009-2230

SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.

• CWE-89

• http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/Patch
• http://mybboard.net/download/104Patch
• http://secunia.com/advisories/35517Vendor Advisory
• http://www.exploit-db.com/exploits/9001
• http://www.securityfocus.com/bid/35458Exploit, Patch
• http://www.vupen.com/english/advisories/2009/1653Patch, Vendor Advisory
• http://blog.mybboard.net/2009/06/15/mybb-147-released-security-update/Patch
• http://mybboard.net/download/104Patch
• http://secunia.com/advisories/35517Vendor Advisory
• http://www.exploit-db.com/exploits/9001
• http://www.securityfocus.com/bid/35458Exploit, Patch
• http://www.vupen.com/english/advisories/2009/1653Patch, Vendor Advisory

Published

Jun 26, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2224Directory traversal vulnerability in ang/shared/flags.php in…
• CVE-2009-2225Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.…
• CVE-2009-2226Cross-site scripting (XSS) vulnerability in Let's PHP! Tree …
• CVE-2009-2227Stack-based buffer overflow in B Labs Bopup Communication Se…
• CVE-2009-2228Cross-site scripting (XSS) vulnerability in engine.php in Ka…
• CVE-2009-2229Directory traversal vulnerability in engine.php in Kasseler …
• CVE-2009-2231MIDAS 1.43 allows remote attackers to bypass authentication …
• CVE-2009-2232SQL injection vulnerability in image.php in Softbiz Banner A…
• CVE-2009-2233The admin interface in AWScripts.com Gallery Search Engine 1…
• CVE-2009-2234Multiple SQL injection vulnerabilities in admin.php in VICID…
• CVE-2009-2235SQL injection vulnerability in page.php in Your Articles Dir…
• CVE-2009-2236SQL injection vulnerability in yad-admin/login.php in Your A…