Lucene search

GoogleOSV:BIT-MYBB-2021-27946

HistoryMar 06, 2024 - 10:59 a.m.

BIT-mybb-2021-27946

2024-03-0610:59:28

Google

osv.dev

sql injection

mybb

version 1.8.26

poll vote count

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

EPSS

0.002

Percentile

58.8%

JSON

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).

References

packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html

github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

EPSS

0.002

Percentile

58.8%

JSON

Related for OSV:BIT-MYBB-2021-27946