Mybb

Mybb

140 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2023-53977

Exploit
  • EPSS 0.03%
  • Veröffentlicht 22.12.2025 21:35:35
  • Zuletzt bearbeitet 27.12.2025 17:15:45

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrators to inject malicious scripts when creating new forums. Attackers can exploit this vulnerability by insertin...

5.4

CVE-2023-53978

Exploit
  • EPSS 0.03%
  • Veröffentlicht 22.12.2025 21:35:35
  • Zuletzt bearbeitet 27.12.2025 17:15:45

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administrators to inject malicious scripts when creating announcements. Attackers can exploit this vulnerability by ins...

8.8

CVE-2023-53979

Exploit
  • EPSS 0.07%
  • Veröffentlicht 22.12.2025 21:35:35
  • Zuletzt bearbeitet 27.12.2025 19:15:40

MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbitrary code. Attackers can modify upload path settings, upload a malicious PHP-embedded image file, and execute ...

5.4

CVE-2023-53976

Exploit
  • EPSS 0.04%
  • Veröffentlicht 22.12.2025 21:35:34
  • Zuletzt bearbeitet 27.12.2025 19:15:39

myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administrators to inject malicious scripts when creating new templates. Attackers can exploit this vulnerability by in...

9.8

CVE-2011-10018

Exploit
  • EPSS 53%
  • Veröffentlicht 13.08.2025 20:35:31
  • Zuletzt bearbeitet 14.08.2025 17:42:18

myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was ...

5.3

CVE-2025-48941

  • EPSS 0.05%
  • Veröffentlicht 02.06.2025 15:58:49
  • Zuletzt bearbeitet 02.07.2025 15:14:30

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden (draft, unapproved, or soft-deleted) threads containing sp...

7.2

CVE-2025-48940

  • EPSS 0.09%
  • Veröffentlicht 02.06.2025 15:52:36
  • Zuletzt bearbeitet 02.07.2025 15:18:47

MyBB is free and open source forum software. Prior to version 1.8.39, the upgrade component does not validate user input properly, which allows attackers to perform local file inclusion (LFI) via a specially crafted parameter value. In order to explo...

7.6

CVE-2025-29457

Exploit
  • EPSS 0.26%
  • Veröffentlicht 17.04.2025 00:00:00
  • Zuletzt bearbeitet 24.04.2025 14:13:52

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.

7.6

CVE-2025-29458

Exploit
  • EPSS 0.26%
  • Veröffentlicht 17.04.2025 00:00:00
  • Zuletzt bearbeitet 24.04.2025 14:14:21

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.

7.6

CVE-2025-29459

Exploit
  • EPSS 0.26%
  • Veröffentlicht 17.04.2025 00:00:00
  • Zuletzt bearbeitet 27.06.2025 15:45:56

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.