CVE-2010-5096

CVE-2010-5096 describes multiple SQL injection vulnerabilities in MyBB (MyBulletinBoard) versions prior to 1.6.1. These flaws allow remote, unauthenticated attackers to execute arbitrary SQL commands by manipulating the 'keywords' parameter in 'search.php' (do_search action) or 'private.php' (do_stuff action). With a CVSS score of 7.5, this vulnerability has a high severity, indicating easy exploitation over the network with potential for partial confidentiality, integrity, and availability impact. While the vendor disputes the SQL injection claim, public exploit code exists on ExploitDB, though there's no evidence of active exploitation, Metasploit modules, or significant community discussion.