61 matches found
CVE-2018-17128
A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode...
CVE-2018-17128
Summary: CVE-2018-17128 affects MyBB’s Visual Editor (pre-1.8.19). The issue is a persistent XSS introduced through the Video MyCode in posts, enabling attacker-controlled JavaScript execution in a victim’s browser when replying to a thread. The vulnerability is tied to the Video or videotype han...
MyBB Cross-Site Scripting Vulnerability (CNVD-2018-19562)
MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is easy to use , multi-language support , scalable , etc. Visual Editor is one of the HTML editor component . A cross-site scripting vulnerability exists in Visual Editor in...
mybb -- vulnerabilities
mybb Team reports: High risk: Image MyCode “alt” attribute persistent XSS. Medium risk: RSS Atom 1.0 item title persistent XSS...
FreeBSD : mybb -- vulnerabilities (bfd5d004-81d4-11e8-a29a-00e04c1ea73d)
mybb Team reports : High risk: Image and URL MyCode Persistent XSS Medium risk: Multipage Reflected XSS Low risk: ACP logs XSS Low risk: Arbitrary file deletion via ACP's Settings Low risk: Login CSRF Low risk: Non-video content embedding via Video MyCode C Tenable Network Security, Inc. The...
MyBB cross-site scripting vulnerability (CNVD-2017-06578)
MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in the Email MyCode component in MyBB versions prior to 1.8.11. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
Cross site scripting
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
CVE-2017-8103
Summary: CVE-2017-8103 affects MyBB prior to 1.8.11. The vulnerability is an XSS in the Email MyCode component that can be triggered by an onmouseover event. The issue is documented across multiple sources (e.g., NVD entry) and is specifically tied to versions before 1.8.11. Impact (as stated): C...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
MyBB MyCode Module Cross-Site Scripting Vulnerability
MyBB is the very best international free forum software. MyBB MyCode module there is a station scripting vulnerability, an attacker can use the vulnerability in the published topic, in the content of the email=2 "onmouseover="alertdocument.locationhover me/email can be triggered by cross-site...
MyBB < 1.8.11 - email MyCode Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:1.8.11 Severity:High risk =============== Proof of Concept: ============= 1.post a thread or reply any thread ,write:...
MyBB MyCode Editor Cross-Site Scripting Vulnerability
MyBB is a PHP-based forum program. A cross-site scripting vulnerability exists in the MyBB editor in versions prior to MyBB 1.8.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML...
CVE-2015-2333
Cross-site scripting XSS vulnerability in the MyCode editor in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the MyCode editor in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-5248
Cross-site scripting XSS vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode...
Cross site scripting
Cross-site scripting XSS vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode...