CVE-2006-0494: Mybulletinboard

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter.

Affected products

• Mybulletinboard Mybulletinboard: version 1.0.2 only

Published 2006-02-01. Last modified 2026-06-16.