Vulnerability index

Browse CVEs

128 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mybb CRITICAL 9.8
CVE-2017-16780EPSS 6%

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Fix: after 1.8.12
Fix from $2,300 2017-11-10
Mybb MEDIUM 5.4
CVE-2017-16781

The installer in MyBB before 1.8.13 has XSS.

Fix: after 1.8.12
Fix from $1,600 2017-11-10
Mybb MEDIUM 6.1
CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.

Fix: after 1.8.10
Fix from $1,600 2017-04-24
Mybb MEDIUM 5.3
CVE-2017-8104

In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.

Fix: after 1.8.10
Fix from $1,600 2017-04-24
Mybb HIGH 7.7
CVE-2017-7566

MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.

Fix: after 1.8.10
Fix from $1,950 2017-04-06
Merge System CRITICAL 9.8
CVE-2016-9402

SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote a…

Fix: after 1.8.6
Fix from $2,300 2017-01-31
Merge System CRITICAL 9.8
CVE-2016-9403

newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leve…

Fix: after 1.8.6
Fix from $2,300 2017-01-31
Merge System CRITICAL 9.8
CVE-2016-9412

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low admi…

Fix: after 1.8.6
Fix from $2,300 2017-01-31
Merge System CRITICAL 9.8
CVE-2016-9416

SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote att…

Fix: after 1.8.7
Fix from $2,300 2017-01-31
Merge System CRITICAL 9.8
CVE-2016-9420

MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "…

Fix: after 1.8.7
Fix from $2,300 2017-01-31
Merge System HIGH 7.5
CVE-2016-9410

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via …

Fix: after 1.8.6
Fix from $1,950 2017-01-31
Merge System HIGH 7.5
CVE-2016-9414

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missi…

Fix: after 1.8.6
Fix from $1,950 2017-01-31
Merge System HIGH 7.5
CVE-2016-9415

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS fi…

Fix: after 1.8.7
Fix from $1,950 2017-01-31
Merge System HIGH 7.5
CVE-2016-9418

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive inf…

Fix: after 1.8.7
Fix from $1,950 2017-01-31
Merge System HIGH 7.4
CVE-2016-9417

The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct serve…

Fix: after 1.8.7
Fix from $1,950 2017-01-31
Merge System MEDIUM 6.5
CVE-2016-9413

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9404

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers t…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9405

Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might all…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9406

Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 migh…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9407

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers t…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9408

Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9409

Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 mig…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Mybb MEDIUM 6.1
CVE-2016-9419

Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 all…

Fix: after 1.8.7
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2016-9421

Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge Sys…

Fix: after 1.8.7
Fix from $1,600 2017-01-31
Merge System MEDIUM 5.3
CVE-2016-9411

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installat…

Fix: after 1.8.6
Fix from $1,600 2017-01-31
Merge System CRITICAL 10.0
CVE-2015-8974

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.…

Fix: after 1.8.5
Fix from $2,300 2017-01-31
Merge System HIGH 8.3
CVE-2015-8973

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass i…

Fix: after 1.8.5
Fix from $1,950 2017-01-31
Merge System HIGH 7.5
CVE-2015-8977

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation …

Fix: after 1.8.5
Fix from $1,950 2017-01-31
Merge System MEDIUM 6.1
CVE-2015-8975

Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge Syste…

Fix: after 1.6.17
Fix from $1,600 2017-01-31
Merge System MEDIUM 6.1
CVE-2015-8976

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might …

Fix: after 1.6.17
Fix from $1,600 2017-01-31