Lucene search
K

CVE-2015-2149

🗓️ 18 Mar 2015 14:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Multiple XSS vulnerabilities in MyBB before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via various fields in the administrative backend

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Tenable Nessus
MyBB < 1.8.4 Multiple Vulnerabilities
30 Mar 201500:00
nessus
CNVD
Multiple cross-site scripting vulnerabilities in MyBB (CNVD-2015-01882)
19 Mar 201500:00
cnvd
Cvelist
CVE-2015-2149
18 Mar 201514:00
cvelist
EUVD
EUVD-2015-2259
7 Oct 202500:30
euvd
Kaspersky
KLA10465 Multiple vulnerabilities in MyBB
18 Mar 201500:00
kaspersky
NVD
CVE-2015-2149
18 Mar 201514:59
nvd
Prion
Cross site scripting
18 Mar 201514:59
prion
NVD
Node
mybbmybbRange1.8.3
ParameterPositionPathDescriptionCWE
MIME-type fieldquery paramadmin/index.phpXSS in config-attachment_types add action via admin/index.php (MIME-type field).CWE-79
titlequery paramadmin/index.phpXSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields).CWE-79
short description fieldquery paramadmin/index.phpXSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields).CWE-79
titlequery paramadmin/index.phpXSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields).CWE-79
short description fieldquery paramadmin/index.phpXSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields).CWE-79
title fieldquery paramadmin/index.phpXSS in forum-management or tool-tasks add actions via admin/index.php (title field).CWE-79
name fieldquery paramadmin/index.phpXSS in style-templates add_set action via admin/index.php (name field).CWE-79
title fieldquery paramadmin/index.phpXSS in style-templates add_template_group action via admin/index.php (title field).CWE-79
name fieldquery paramadmin/index.phpXSS in config-post_icons add action via admin/index.php (name field).CWE-79
title to assign fieldquery paramadmin/index.phpXSS in user-titles add action via admin/index.php (title to assign field).CWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 22:30Current
5.4Medium risk
Vulners AI Score5.4
CVSS 23.5
EPSS0.00297
53