- EPSS 0.45%
- Published 11.04.2007 10:19:00
- Last modified 09.04.2025 00:30:58
member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prin...
- EPSS 0.32%
- Published 31.01.2007 18:28:00
- Last modified 09.04.2025 00:30:58
Cross-site request forgery (CSRF) vulnerability in MyBB (aka MyBulletinBoard) 1.2.2 allows remote attackers to send messages to arbitrary users. NOTE: the provenance of this information is unknown; the details are obtained solely from third party in...
- EPSS 1.09%
- Published 29.01.2007 17:28:00
- Last modified 09.04.2025 00:30:58
Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949.
CVE-2006-0442
- EPSS 0.53%
- Published 26.01.2006 22:03:00
- Last modified 03.04.2025 01:03:51
Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig...
- EPSS 0.31%
- Published 16.01.2006 21:03:00
- Last modified 03.04.2025 01:03:51
Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php,...
CVE-2005-4199
- EPSS 1.71%
- Published 13.12.2005 11:03:00
- Last modified 03.04.2025 01:03:51
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) sho...