Lucene search

RedhatCVE-2010-4522

HistoryDec 30, 2010 - 9:00 p.m.

CVE-2010-4522

2010-12-3021:00:02

CWE-79

redhat

web.nvd.nist.gov

mybb

mybulletinboard

xss

cross-site scripting

vulnerability

remote attackers

injection

editpost.php

member.php

newreply.php

cve-2010-4522

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.

Affected configurations

Nvd

Node

mybbmybbMatch1.4.14

mybbmybbMatch1.6.0

VendorProductVersionCPE
mybbmybb1.4.14cpe:2.3:a:mybb:mybb:1.4.14:*:*:*:*:*:*:*
mybbmybb1.6.0cpe:2.3:a:mybb:mybb:1.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mybb	mybb	1.4.14	cpe:2.3:a:mybb:mybb:1.4.14:::::::*
mybb	mybb	1.6.0	cpe:2.3:a:mybb:mybb:1.6.0:::::::*

References

blog.mybb.com/2010/12/15/mybb-1-6-1-release-1-4-14-update/

openwall.com/lists/oss-security/2010/12/20/1

openwall.com/lists/oss-security/2010/12/22/2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Related for CVE-2010-4522