Mybb

Mybb

136 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6

CVE-2007-1964

  • EPSS 0.45%
  • Veröffentlicht 11.04.2007 10:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prin...

5

CVE-2007-0622

  • EPSS 0.32%
  • Veröffentlicht 31.01.2007 18:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote attackers to send messages to arbitrary users. NOTE: the provenance of this information is unknown; the details are obtained solely from third party in...

6

CVE-2007-0544

  • EPSS 1.09%
  • Veröffentlicht 29.01.2007 17:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949.

4.3

CVE-2006-0442

Exploit
  • EPSS 0.53%
  • Veröffentlicht 26.01.2006 22:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig...

10

CVE-2006-0218

  • EPSS 0.31%
  • Veröffentlicht 16.01.2006 21:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php,...

7.5

CVE-2005-4199

  • EPSS 1.71%
  • Veröffentlicht 13.12.2005 11:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) sho...