Lucene search
K

CVE-2015-2149

🗓️ 18 Mar 2015 14:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 56 Views🌐 WEB

Multiple XSS vulnerabilities in MyBB before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via various fields in the administrative backend

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Tenable Nessus
MyBB < 1.8.4 Multiple Vulnerabilities
30 Mar 201500:00
nessus
CNVD
Multiple cross-site scripting vulnerabilities in MyBB (CNVD-2015-01882)
19 Mar 201500:00
cnvd
Cvelist
CVE-2015-2149
18 Mar 201514:00
cvelist
EUVD
EUVD-2015-2259
7 Oct 202500:30
euvd
Kaspersky
KLA10465 Multiple vulnerabilities in MyBB
18 Mar 201500:00
kaspersky
NVD
CVE-2015-2149
18 Mar 201514:59
nvd
Prion
Cross site scripting
18 Mar 201514:59
prion
NVD
Node
mybbmybbRange1.8.3
ParameterPositionPathDescriptionCWE
MIME-typerequest bodyadmin/index.phpXSS via MIME-type field in config-attachment_types add actionCWE-79
titlerequest bodyadmin/index.phpXSS via title field in config-mycode add action (or user-groups module)CWE-79
short_descriptionrequest bodyadmin/index.phpXSS via short description field in user-groups add action (or config-mycode)CWE-79
titlerequest bodyadmin/index.phpXSS via title field in forum-management add action (or tool-tasks)CWE-79
namerequest bodyadmin/index.phpXSS via name field in style-templates add_set actionCWE-79
titlerequest bodyadmin/index.phpXSS via title field in style-templates add_template_group actionCWE-79
namerequest bodyadmin/index.phpXSS via name field in config-post_icons add actionCWE-79
title_to_assignrequest bodyadmin/index.phpXSS via title to assign field in user-titles add actionCWE-79
usernamerequest bodyadmin/index.phpXSS via username field in config-banning add actionCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:23Current
5.4Medium risk
Vulners AI Score5.4
CVSS 23.5
EPSS0.01641
56