Skip to content

Mybb vulnerabilities

Products

Newest

mybbMyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to...CVE-2008-70826.8 MediumAugust 25, 2009
mybbMyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard...CVE-2008-49305.0 MediumNovember 4, 2008
mybbMyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded...CVE-2008-49297.5 HighNovember 4, 2008
mybbCross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka...CVE-2008-49284.3 MediumNovember 4, 2008
mybbmoderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator...CVE-2008-39677.5 HighSeptember 10, 2008
mybbMultiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1...CVE-2008-39664.3 MediumSeptember 10, 2008
mybbSQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote...CVE-2008-39657.5 HighSeptember 10, 2008
mybbCross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to...CVE-2008-33344.3 MediumJuly 27, 2008
mybbDirectory traversal vulnerability in inc/class_language.php in MyBB before 1.2.13 has unknown...CVE-2008-30717.5 HighJuly 8, 2008
mybbUnspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact...CVE-2008-30707.5 HighJuly 8, 2008
mybbMultiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers...CVE-2008-30694.3 MediumJuly 8, 2008
mybbMultiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow...CVE-2008-07886.8 MediumFebruary 15, 2008
mybbMultiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and...CVE-2008-0383Public exploit7.5 HighJanuary 22, 2008
mybbMyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter...CVE-2007-06895.0 MediumMay 14, 2007
mybbMultiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and...CVE-2007-2212Public exploit7.5 HighApril 24, 2007
mybb, mybulletinboard +1 moremember.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote...CVE-2007-19646.0 MediumApril 11, 2007
mybb, mybulletinboard +1 moreSQL injection vulnerability in the create_session function in class_session.php in MyBB (aka...CVE-2007-1963Public exploit7.5 HighApril 11, 2007
ecardmax.com hot editor, mybb hot editor plugin +1 moreDirectory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0...CVE-2007-1906Public exploit6.8 MediumApril 10, 2007
mybbCross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote...CVE-2007-06225.0 MediumJanuary 31, 2007
mybbCross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows...CVE-2007-05446.0 MediumJanuary 29, 2007
mybb devbbCross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote...CVE-2006-2070Public exploit4.3 MediumApril 27, 2006
mybbMultiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02...CVE-2006-0442Public exploit4.3 MediumJanuary 26, 2006
mybbMultiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified...CVE-2006-021810.0 HighJanuary 16, 2006
mybbMultiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote...CVE-2005-41997.5 HighDecember 13, 2005