2280 matches found
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...
Sql injection
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
CVE-2021-27947
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
CVE-2021-27890
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. issue 3 of 3...
Cross site scripting
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools...
CVE-2021-27949
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools...
CVE-2021-27949
CVE-2021-27949: MyBB prior to 1.8.26 is vulnerable to Cross-site Scripting via the Custom moderator tools. The issue affects the MyBB web forum software (PHP/MySQL) and is triggered through inputs handled by moderator tools, enabling injected scripts to run in a victim’s browser. The recommended ...
CVE-2021-27889
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
CVE-2021-27889
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
Cross site scripting
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
CVE-2021-27948
CVE-2021-27948 affects MyBB before 1.8.26, via the User Groups component, caused by a SQL injection vulnerability in the user groups logic. The vulnerability can impact confidentiality, integrity and availability (per CVSS metrics). Mitigation: upgrade MyBB to 1.8.26 or later (or apply vendor-sup...
CVE-2021-27948
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. issue 3 of 3...
CVE-2021-27947
CVE-2021-27947 describes a SQL injection in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. Affected: MyBB versions prior to 1.8.26. Root cause: unsafe handling of input in the Copy Forum functionality leading to SQL injection. Impacts documented include potential data exposure...
CVE-2021-27947
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
CVE-2021-27946
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...
CVE-2021-27946
CVE-2021-27946 : MyBB before 1.8.26 is vulnerable to an SQL injection in the poll vote count due to lack of sanitization of the votes[] parameter in Edit Poll. Exploitation can occur during a Move/Copy operation and may enable privilege escalation for moderators/administrators in some configurati...
CVE-2021-27890
Summary of CVE-2021-27890 (MyBB SQL Injection) Affects MyBB versions prior to 1.8.26, where a SQL injection vulnerability exists via theme properties included in theme XML files. The issue is described as a SQL Injection vulnerability without publicly detailed exploit steps in the initial descrip...