177 matches found
CVE-2026-45121
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to access titles of calendars that are otherwise inaccessible. The affected calendar-selection paths in calendar.php perfo...
CVE-2026-45121
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to access titles of calendars that are otherwise inaccessible. The affected calendar-selection paths in calendar.php perfo...
CVE-2026-45121 MyBB: Insufficient permission check for calendar select
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to access titles of calendars that are otherwise inaccessible. The affected calendar-selection paths in calendar.php perfo...
EUVD-2026-61053
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to access titles of calendars that are otherwise inaccessible. The affected calendar-selection paths in calendar.php perfo...
CVE-2026-45121
In MyBB versions before 1.8.40, calendar.php performs permission checks against an invalid calendar context, allowing authenticated users to view titles of otherwise inaccessible calendars. CVSS 3.1 scores this MEDIUM (4.3) with network attack vector and low privileges required. Upgrade to versio...
PT-2026-77175
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated users to access titles of calendars that are otherwise inaccessible. The affected calendar-selection paths in calendar.php perfo...
CVE-2020-37081
CVE-2020-37081 describes multiple remote SQL injection vulnerabilities in Fishing Reservation System 7.5, affecting admin.php, cart.php, and calendar.php. The vulnerabilities allow attackers to inject SQL via parameters such as uid, pid, type, m, y, and code, potentially compromising the database...
CVE-2020-37081
Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database manageme...
CVE-2005-1866
Cross-site scripting XSS vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter...
EUVD-2004-1779
Malware in sbrugna...
EUVD-2006-7044
Malware in sbrugna...
EUVD-2006-4214
Malware in sbrugna...
EUVD-2006-0228
Malware in sbrugna...
EUVD-2006-3903
Malware in sbrugna...
EUVD-2005-3906
Malware in sbrugna...
EUVD-2007-2206
Malware in sbrugna...
EUVD-2004-2503
Malware in sbrugna...
EUVD-2005-4194
Malware in sbrugna...