Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mybb

Mybb vulnerabilities

Products

Mybb158
Merge System24
Forums3

Newest

Known exploitedIn KEVPublic exploitFix available

mybb merge system, mybb +1 moreMyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote...CVE-2016-94107.5 HighJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard)...CVE-2016-94096.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard)...CVE-2016-94086.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB...CVE-2016-94076.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard)...CVE-2016-94066.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard)...CVE-2016-94056.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB...CVE-2016-94046.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 morenewreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows...CVE-2016-94039.8 CriticalJanuary 31, 2017
mybb merge system, mybb +1 moreSQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and...CVE-2016-94029.8 CriticalJanuary 31, 2017
mybb merge system, mybb +1 moreMyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8...CVE-2015-89777.5 HighJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x...CVE-2015-89766.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreCross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard)...CVE-2015-89756.1 MediumJanuary 31, 2017
mybb merge system, mybb +1 moreSQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB ...CVE-2015-897410.0 CriticalJanuary 31, 2017
mybb merge system, mybb +1 morexmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge...CVE-2015-89738.3 HighJanuary 31, 2017
mybbCross-site scripting (XSS) vulnerability in the quick edit function in xmlhttp.php in MyBB (aka...CVE-2015-45524.3 MediumSeptember 3, 2015
mybbUnspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors...CVE-2015-278610.0 HighMarch 29, 2015
mybbThe cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding...CVE-2015-23527.5 HighMarch 19, 2015
mybbA JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to obtain the...CVE-2015-23355.0 MediumMarch 18, 2015
mybbCross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB ...CVE-2015-23346.8 MediumMarch 18, 2015
mybbCross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard)...CVE-2015-23334.3 MediumMarch 18, 2015
mybbCross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) before 1.8.4...CVE-2015-23324.3 MediumMarch 18, 2015
mybbMultiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka...CVE-2015-21493.5 LowMarch 18, 2015
mybbMultiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1...CVE-2014-9241Public exploit4.3 MediumDecember 3, 2014
mybbSQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows...CVE-2014-9240Public exploit7.5 HighDecember 3, 2014
mybbCross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject...CVE-2014-52484.3 MediumAugust 14, 2014
mybbCross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows...CVE-2014-18404.3 MediumMarch 3, 2014
mybbCross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser...CVE-2013-72884.3 MediumJanuary 10, 2014
mybbCross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12...CVE-2013-72754.3 MediumJanuary 8, 2014
mybb ajax forum statMultiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0...CVE-2013-6936Public exploit7.5 HighDecember 4, 2013
mybbSQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6...CVE-2012-5909Public exploit7.5 HighNovember 17, 2012
mybbCross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka...CVE-2012-5908Public exploit4.3 MediumNovember 17, 2012
mybbUnspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to...CVE-2011-513310.0 HighAugust 30, 2012
mybbCross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject...CVE-2011-51324.3 MediumAugust 30, 2012
mybbCross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote...CVE-2011-51316.8 MediumAugust 30, 2012
mybb** DISPUTED ** Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1...CVE-2010-5096Public exploitDisputed7.5 HighAugust 13, 2012
mybbMyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information...CVE-2012-23275.0 MediumAugust 13, 2012
mybbCross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka...CVE-2012-23264.3 MediumAugust 13, 2012
mybbSQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP...CVE-2012-23257.5 HighAugust 13, 2012
mybbMultiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote...CVE-2012-23247.5 HighAugust 13, 2012
mybbMyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a...CVE-2011-37595.0 MediumSeptember 23, 2011
mybbMyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join...CVE-2010-46295.0 MediumDecember 30, 2010
mybbmember.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the...CVE-2010-46285.0 MediumDecember 30, 2010
mybbCross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard)...CVE-2010-46276.8 MediumDecember 30, 2010
mybbThe my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not...CVE-2010-46265.1 MediumDecember 30, 2010
mybbMyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible...CVE-2010-46255.0 MediumDecember 30, 2010
mybbMyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended...CVE-2010-46243.5 LowDecember 30, 2010
mybbMultiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6...CVE-2010-45224.3 MediumDecember 30, 2010
mybbCross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows...CVE-2009-4813Public exploit4.3 MediumApril 27, 2010
mybbDirectory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier...CVE-2009-44496.5 MediumDecember 29, 2009
mybbinc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions,...CVE-2009-44485.0 MediumDecember 29, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open