SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/25018
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1069
http://www.securityfocus.com/archive/1/426631/100/0/threaded