Browse CVEs

HIGH 10.0 CVE-2015-2786 Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to … Mybb after 1.8.3 Fix from $1,9502015-03-29 HIGH 7.5 CVE-2015-2352 The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows a… Mybb after 1.8.3 Fix from $1,9502015-03-19 MEDIUM 5.0 CVE-2015-2335 A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors. Mybb after 1.8.3 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-2334 Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attac… Mybb after 1.8.3 Fix from $1,6002015-03-18 HIGH 7.5 CVE-2014-9240 SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands … Mybb Patch available Fix from $1,9502014-12-03 HIGH 7.5 CVE-2013-6936 Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers… Ajax Forum Stat No fix yet Fix from $1,9502013-12-04 HIGH 7.5 CVE-2012-5909 SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL comm… Mybb No fix yet Fix from $1,9502012-11-17 HIGH 10.0 CVE-2011-5133 Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list." Mybb after 1.6.4 Fix from $1,9502012-08-30 MEDIUM 6.8 CVE-2011-5131 Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for… Mybb after 1.6.4 Fix from $1,6002012-08-30 HIGH 7.5 CVE-2010-5096EPSS 6% Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the ke… Mybb after 1.6.0 Fix from $1,9502012-08-13 HIGH 7.5 CVE-2012-2325 SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows … Mybb after 1.6.6 Fix from $1,9502012-08-13 MEDIUM 5.0 CVE-2012-2327 MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the i… Mybb after 1.6.6 Fix from $1,6002012-08-13 HIGH 7.5 CVE-2012-2324 Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via u… Mybb after 1.6.6 Fix from $1,9502012-08-13 MEDIUM 5.0 CVE-2011-3759 MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the install… Mybb No fix yet Fix from $1,6002011-09-23 MEDIUM 6.8 CVE-2010-4627 Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the auth… Mybb after 1.4.11 Fix from $1,6002010-12-30 MEDIUM 5.1 CVE-2010-4626 The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easi… Mybb after 1.4.11 Fix from $1,6002010-12-30 MEDIUM 5.0 CVE-2010-4625 MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows rem… Mybb after 1.4.11 Fix from $1,6002010-12-30 MEDIUM 5.0 CVE-2010-4628 member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to c… Mybb after 1.4.11 Fix from $1,6002010-12-30 MEDIUM 5.0 CVE-2010-4629 MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a deni… Mybb after 1.4.11 Fix from $1,6002010-12-30 MEDIUM 6.5 CVE-2009-4449 Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery… Mybb No fix yet Fix from $1,6002009-12-29 MEDIUM 5.0 CVE-2009-4448 inc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of service (CPU… Mybb Patch available Fix from $1,6002009-12-29 MEDIUM 6.8 CVE-2008-7082 MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) d… Mybb Mitigation only Fix from $1,6002009-08-25 HIGH 7.5 CVE-2008-4929 MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for r… Mybb No fix yet Fix from $1,9502008-11-04 MEDIUM 5.0 CVE-2008-4930 MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows re… Mybb Mitigation only Fix from $1,6002008-11-04 HIGH 7.5 CVE-2008-3965 SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a ce… Mybb after 1.4.0 Fix from $1,9502008-09-11 HIGH 7.5 CVE-2008-3967 moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attac… Mybb after 1.4.0 Fix from $1,9502008-09-11 HIGH 7.5 CVE-2008-3070 Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user['language'] va… Mybb after 1.2.12 Fix from $1,9502008-07-08 HIGH 7.5 CVE-2008-3071 Directory traversal vulnerability in inc/class_language.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language vari… Mybb after 1.2.12 Fix from $1,9502008-07-08 MEDIUM 6.8 CVE-2008-0788 Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authentication of mode… Mybb after 1.2.11 Fix from $1,6002008-02-15 HIGH 7.5 CVE-2008-0383 Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL commands via (1… Mybb after 1.2.10 Fix from $1,9502008-01-22