5

CVE-2010-4629

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.

Data is provided by the National Vulnerability Database (NVD)
Mybb ≫ Mybb Version <= 1.4.11
Mybb ≫ Mybb Version1.00
Mybb ≫ Mybb Version1.01
Mybb ≫ Mybb Version1.1.0
Mybb ≫ Mybb Version1.1.1
Mybb ≫ Mybb Version1.1.2
Mybb ≫ Mybb Version1.1.3
Mybb ≫ Mybb Version1.1.4
Mybb ≫ Mybb Version1.1.5
Mybb ≫ Mybb Version1.1.6
Mybb ≫ Mybb Version1.1.7
Mybb ≫ Mybb Version1.1.8
Mybb ≫ Mybb Version1.02
Mybb ≫ Mybb Version1.2
Mybb ≫ Mybb Version1.2.0
Mybb ≫ Mybb Version1.2.1
Mybb ≫ Mybb Version1.2.2
Mybb ≫ Mybb Version1.2.3
Mybb ≫ Mybb Version1.2.4
Mybb ≫ Mybb Version1.2.5
Mybb ≫ Mybb Version1.2.6
Mybb ≫ Mybb Version1.2.7
Mybb ≫ Mybb Version1.2.8
Mybb ≫ Mybb Version1.2.9
Mybb ≫ Mybb Version1.2.10
Mybb ≫ Mybb Version1.2.11
Mybb ≫ Mybb Version1.2.12
Mybb ≫ Mybb Version1.2.13
Mybb ≫ Mybb Version1.03
Mybb ≫ Mybb Version1.04
Mybb ≫ Mybb Version1.4.0
Mybb ≫ Mybb Version1.4.2
Mybb ≫ Mybb Version1.4.3
Mybb ≫ Mybb Version1.4.6
Mybb ≫ Mybb Version1.4.8
Mybb ≫ Mybb Version1.4.9
Mybb ≫ Mybb Version1.4.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.19% 0.769
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P