CVE-2006-0219: Mybulletinboard

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct (1) SQL injection attacks via an attachment name that is not properly handled by inc/functions_upload.php (CVE-2005-4602), and possibly (2) other attacks related to threadmode in usercp.php.

Affected products

• Mybulletinboard Mybulletinboard: version 1.0.2 only; version 1.0_final only; version 1.0_preview_release_2 only; version 1.01 only

Published 2006-01-16. Last modified 2026-06-16.