CVE-2008-0382: Mybulletinboard

High severity, CVSS 7.5. EPSS: 41.9% chance of exploitation in the next 30 days.

Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter to (1) forumdisplay.php or (2) a results action in search.php.

Affected products

• Mybulletinboard Mybulletinboard: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0_pr2 only; …

Published 2008-01-22. Last modified 2026-06-16.