CVE-2005-2778: Mybulletinboard

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter.

Affected products

• Mybulletinboard Mybulletinboard: version rc1 only; version rc2 only; version rc3 only; version rc4 only

Published 2005-09-02. Last modified 2026-06-16.