| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
| MyBB < 1.8.4 Multiple Vulnerabilities | 30 Mar 201500:00 | – | nessus | |
| Multiple cross-site scripting vulnerabilities in MyBB (CNVD-2015-01882) | 19 Mar 201500:00 | – | cnvd | |
| CVE-2015-2149 | 18 Mar 201514:00 | – | cvelist | |
| EUVD-2015-2259 | 7 Oct 202500:30 | – | euvd | |
| KLA10465 Multiple vulnerabilities in MyBB | 18 Mar 201500:00 | – | kaspersky | |
| CVE-2015-2149 | 18 Mar 201514:59 | – | nvd | |
| Cross site scripting | 18 Mar 201514:59 | – | prion |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| MIME-type field | query param | admin/index.php | XSS in config-attachment_types add action via admin/index.php (MIME-type field). | CWE-79 |
| title | query param | admin/index.php | XSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields). | CWE-79 |
| short description field | query param | admin/index.php | XSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields). | CWE-79 |
| title | query param | admin/index.php | XSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields). | CWE-79 |
| short description field | query param | admin/index.php | XSS in config-mycode or user-groups add actions via admin/index.php (title or short description fields). | CWE-79 |
| title field | query param | admin/index.php | XSS in forum-management or tool-tasks add actions via admin/index.php (title field). | CWE-79 |
| name field | query param | admin/index.php | XSS in style-templates add_set action via admin/index.php (name field). | CWE-79 |
| title field | query param | admin/index.php | XSS in style-templates add_template_group action via admin/index.php (title field). | CWE-79 |
| name field | query param | admin/index.php | XSS in config-post_icons add action via admin/index.php (name field). | CWE-79 |
| title to assign field | query param | admin/index.php | XSS in user-titles add action via admin/index.php (title to assign field). | CWE-79 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation