MyBB（MyBulletinBoard） 跨站脚本漏洞

MyBB is a free, web-based forum software developed by the MyBB team using PHP and MySQL. This software features simplicity in use, support for multiple languages, and scalability. Version 2.0.3 of MyBB contains a cross-site scripting vulnerability. This vulnerability stems from improper cleaning ...

MyBB 路径遍历漏洞

MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A path traversal vulnerability exists in MyBB version 1.8.32, which originates from allowing an authenticated...

MyBB 跨站脚本漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A security vulnerability exists in MyBB Export User plugin version 2.0 and prior versions, which stems from a...

SUSE CVE-2006-3758

inc/init.php in Archive Mode Light in MyBB aka MyBulletinBoard 1.1.4 calls the extract function with EXTROVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the SERVERHTTPCLIENTIP parameter in...

MyBB 路径遍历漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use , support for multiple languages , scalable and so on. A security vulnerability exists in MyBB versions prior to 1.8.33. An attacker can exploit this vulnerability t...

MyBB Information Disclosure Vulnerability (CNVD-2019-16948)

MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. An information disclosure vulnerability exists in MyBB version 1.8.19, which can be exploited by...

MyBB OUGC Awards Plugin Cross-Site Scripting Vulnerability

MyBB a.k.a. MyBulletinBoard is a free and web-based forum software developed by the MyBB team using PHP and MySQL.OUGC Awards plugin is used in one of the reward system plugins. A cross-site scripting vulnerability exists in versions of MyBB OUGC Awards plugin prior to version 1.8.19. A remote...

MyBB Latest Posts on Profile plugin cross-site scripting vulnerability

MyBB aka MyBulletinBoard is a free and web-based forum software developed by the MyBB team using PHP and MySQL. Latest Posts on Profile is used in one of the post profile plugin. A cross-site scripting vulnerability exists in version 1.1 of the MyBB Latest Posts on Profile plugin, which stems fro...

CVE-2016-9404

Cross-site scripting XSS vulnerability in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors related to login...

CVE-2016-9406

Cross-site scripting XSS vulnerability in the User control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-9409

Cross-site scripting XSS vulnerability in the Admin control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving pruning logs...