CVE-2006-3243

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.

Published: Jun 27, 2006
Updated: Nov 9, 2025
CVE: CVE-2006-3243
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mybulletinboard / mybulletinboard	1.0_final	1.0_final.x
mybulletinboard / mybulletinboard	1.1.1	1.1.1.x
mybulletinboard / mybulletinboard	1.0_rc4	1.0_rc4.x
mybulletinboard / mybulletinboard	1.00_rc4	1.00_rc4.x
mybulletinboard / mybulletinboard	1.00_rc3	1.00_rc3.x
mybulletinboard / mybulletinboard	1.1.3	1.1.3.x
mybulletinboard / mybulletinboard	1.0.3	1.0.3.x
mybulletinboard / mybulletinboard	1.00_rc4_security_patch	1.00_rc4_security_patch.x
mybulletinboard / mybulletinboard	1.04	1.04.x
mybulletinboard / mybulletinboard	1.01	1.01.x
mybulletinboard / mybulletinboard	1.00_rc1	1.00_rc1.x
mybulletinboard / mybulletinboard	1.0_pr2	1.0_pr2.x
mybulletinboard / mybulletinboard	1.00_rc2	1.00_rc2.x
mybulletinboard / mybulletinboard	1.1	1.1.x
mybulletinboard / mybulletinboard	1.0.1	1.0.1.x
mybulletinboard / mybulletinboard	1.0.4	1.0.4.x
mybulletinboard / mybulletinboard	1.1.2	1.1.2.x
mybulletinboard / mybulletinboard	1.0.2	1.0.2.x
mybulletinboard / mybulletinboard	1.0_rc2	1.0_rc2.x
mybulletinboard / mybulletinboard	1.0_preview_release_2	1.0_preview_release_2.x

Vulnerability Database

313,359

CVE-2006-3243

Deep Security Visibility Without the Complexity