CVE-2005-2580: Mybulletinboard

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php.

Affected products

• Mybulletinboard Mybulletinboard: version 1.00_rc4_security_patch only

Published 2005-08-16. Last modified 2026-06-16.