CVE-2008-0383: Mybb

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1) the mergepost parameter in a do_mergeposts action, (2) rid parameter in an allreports action, or (3) threads parameter in a do_multimovethreads action to (a) moderation.php; or (4) gid parameter to (b) admin/usergroups.php.

Affected products

• Mybb Mybb: up to and including 1.2.10

Published 2008-01-22. Last modified 2026-06-16.