Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-4522
mybb
mybulletinboard
xss
cross-site scripting
vulnerability
remote attackers
injection
editpost.php
member.php
newreply.php
cve-2010-4522
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
50.6%
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.
Affected configurations
Node
mybbmybbMatch1.4.14
ORmybbmybbMatch1.6.0
Related
nvd
nvd
CVE-2010-4522
2010-12-30 21:00:02
openvas
openvas
MyBB Multiple Cross-Site Scripting Vulnerabilities
2011-01-08 00:00:00
cvelist
cvelist
CVE-2010-4522
2022-10-03 16:21:05
prion
prion
Cross site scripting
2010-12-30 21:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
50.6%
Related for CVE-2010-4522