EUVD-2016-10225

Malware in sbrugna...

CVE-2019-3579

MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter...

CVE-2025-29457

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...

CVE-2025-29458

A vulnerability in MyBB version 1.8.38 allows a remote attacker to obtain sensitive information through the Change Avatar function. The root cause is attributed to insufficient validation of requests on the server side. While the supplier disputes the vulnerability due to SSRF mitigation and spec...

CVE-2022-43708

MyBB 1.8.31 has a issue 2 of 2 cross-site scripting XSS vulnerabilities in the post Attachments interface allow attackers to inject HTML by persuading the user to upload a file with specially crafted name...

CVE-2021-27946

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...

CVE-2019-3578

MyBB 1.8.19 has XSS in the resetpassword function...

MyBB < 1.8.6 Arbitrary Code Execution

Binary data 9946.prm...

MyBB-search.txt

http://127.0.0.1/mybb/search.php?action=dosearch&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="alertdocument.cookie&sorder=1&showresults=threads&submit=Search --------------------Summary---------------- Software: MyBB Sowtware'...