2280 matches found
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
CVE-2017-8104
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter...
CVE-2017-8104
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter...
CVE-2017-8104
CVE-2017-8104 pertains to MyBB versions prior to 1.8.11, where the smilie module contains a directory traversal vulnerability via the pathfolder parameter. The vulnerability arises in the smilie module’s handling of user-supplied path information, allowing an attacker to traverse directories and ...
CVE-2017-8103
Summary: CVE-2017-8103 affects MyBB prior to 1.8.11. The vulnerability is an XSS in the Email MyCode component that can be triggered by an onmouseover event. The issue is documented across multiple sources (e.g., NVD entry) and is specifically tied to versions before 1.8.11. Impact (as stated): C...
CVE-2017-8104
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
MyBB Cross-Site Scripting Vulnerability (CNVD-2017-05600)
MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in versions of MyBB prior to 1.8.11, which allows remote attackers to inject arbitrary web script or HTML via the content of a post...
MyBB Directory Traversal Vulnerability
MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the backend of MyBB versions prior to 1.8.11, which can be exploited by a remote attacker to submit a special directory traversal request to read arbitrary files...
MyBB smilie Module 1.8.11 - pathfolder Directory Traversal
MyBB smilie Module 1.8.11 - pathfolder Directory Traversal Description: ============ product: MyBB Homepage: https://mybb.com/ vulnerable version: input'pathfolder'; Line 327 $dir = @opendirMYBBROOT.$path; if we input "pathfolder" to "../../bypass/smile",Directory Traversal success! ============...
MyBB smilie Module < 1.8.11 - pathfolder Directory Traversal Vulnerability
Exploit for php platform in category web applications Description: ============ product: MyBB Homepage: https://mybb.com/ vulnerable version: input'pathfolder'; Line 327 $dir = @opendirMYBBROOT.$path; if we input "pathfolder" to "../../bypass/smile",Directory Traversal success! ============ Fixed...
MyBB < 1.8.11 - email MyCode Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:1.8.11 Severity:High risk =============== Proof of Concept: ============= 1.post a thread or reply any thread ,write:...
MyBB Directory Traversal
Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:input'pathfolder'; Line 327 $dir = @opendirMYBBROOT.$path; if we input "pathfolder" to "../../bypass/smile",Directory Traversal success! ============ Fixed: ============ This vulnerability was fixed in version...
MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting
Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:1.8.11 Severity:High risk =============== Proof of Concept: ============= 1.post a thread or reply any thread ,write: email=2"onmouseover="alertdocument.locationhover me/email then when user’s mouse hover it,XSS...
MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal
Description: ============ product: MyBB Homepage: https://mybb.com/ vulnerable version: input'pathfolder'; Line 327 $dir = @opendirMYBBROOT.$path; if we input "pathfolder" to "../../bypass/smile",Directory Traversal success! ============ Fixed: ============ This vulnerability was fixed in version...
MyBB Cross Site Scripting
Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:1.8.11 Severity:High risk =============== Proof of Concept: ============= 1.post a thread or reply any thread ,write: email=2"onmouseover="alertdocument.locationhover me/email then when useras mouse hover it,XSS...
MyBB 1.8.11 - email MyCode Cross-Site Scripting
MyBB 1.8.11 - email MyCode Cross-Site Scripting Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:1.8.11 Severity:High risk =============== Proof of Concept: ============= 1.post a thread or reply any thread ,write: email=2"onmouseover="alertdocument.locationhov...
MyBB 1.8.10 Server-Side Request Forgery
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Server Side Request Forgery SSRF Vulnerability product: MyBB vulnerable version: 1.8.10 fixed version: 1.8.11 CVE number: CVE-2017-7566 impact: Medium homepage:...
MyBB Server-Side Request Forgery Security Bypass Vulnerability
MyBB is a popular forum program. MyBB suffers from a server-side request forgery security bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized operations...
