MyBB Referer头my_post_key令牌信息泄露漏洞

BUGTRAQ ID: 32467 MyBB是一款流行的Web论坛程序。 MyBB在对引用了外部站点的图形发送某些请求时（如执行拆分和合并线索或删帖等操作），Referer HTTP头中会包含有mypostkey令牌，这可能导致泄露用户的密钥令牌。 MyBB 1.4.3 MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...

MyBB 1.4.3 my_post_key Disclosure Vulnerability

MyBB 1.4.3 mypostkey Disclosure Vulnerability by NBBN http://nbbnsblog.co.cc Vendor: http://mybboard.net Date: November 25, 2008 These URLs contains "mypostkey". Moderators and admins use these sometimes, depending on what they want to do with a thread. mypostkey is used to perform various action...

mybb-disclose.txt

MyBB 1.4.3 mypostkey Disclosure Vulnerability by NBBN http://nbbnsblog.co.cc Vendor: http://mybboard.net Date: November 25, 2008 These URLs contains "mypostkey". Moderators and admins use these sometimes, depending on what they want to do with a thread. mypostkey is used to perform various action...

CVE-2008-4928

Cross-site scripting XSS vulnerability in the redirect function in functions.php in MyBB aka MyBulletinBoard 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a...

CVE-2008-4929

MyBB aka MyBulletinBoard 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames...

CVE-2008-4930

MyBB aka MyBulletinBoard 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing....

Design/Logic Flaw

MyBB aka MyBulletinBoard 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames...

Design/Logic Flaw

MyBB aka MyBulletinBoard 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing....

Cross site scripting

Cross-site scripting XSS vulnerability in the redirect function in functions.php in MyBB aka MyBulletinBoard 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a...

CVE-2008-4930

CVE-2008-4930 affects MyBB (aka MyBulletinBoard) 1.4.2. An uploaded file with a nonstandard file type containing HTML sequences can be processed as HTML by Internet Explorer’s content inspection, due to incomplete MIME sniffing protection. This can enable XSS and other attacks. The NVD entry list...

CVE-2008-4928

CVE-2008-4928 affects MyBB 1.4.2, where an XSS in the redirect function (functions.php) can be triggered via the url parameter in a removesubscriptions action to moderation.php, tied to the ajax-based JavaScript redirect. The vulnerability could be used to inject script/HTML and is noted to poten...

CVE-2008-4929

MyBB aka MyBulletinBoard 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames...

CVE-2008-4929

MyBB aka MyBulletinBoard 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames...

CVE-2008-4929

MyBB 1.4.2 stores attachments with filenames generated using insufficient randomness, allowing remote attackers to read files by guessing names. Affected component: attachment filename generation. Impact: partial confidentiality of attachment contents. Root cause: weak randomness in filename cons...

CVE-2008-4930

MyBB aka MyBulletinBoard 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing....

PT-2008-6105 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions 1.4.2 Description: The issue is related to insufficient randomness used to compose filenames of uploaded files used as attachments. This makes it easier for remote attackers to read these files by guessing filenames...

MyBB消息附件可预测文件名漏洞

BUGTRAQ ID: 31936 MyBB是一款流行的Web论坛程序。 在某些运行MyBB的服务器上，攻击者可以较容易的猜测到上传文件的文件名。有漏洞的代码段为： $filename = "post".$mybb-user'uid'."".time.".attach"; 这段代码创建以下形式的文件名：post1234unix timestamp.attach. 如果知道了用户ID和张贴时间，就可以轻易的猜测到文件名，并绕过任何类型的MIME嗅探保护；此外这还可能导致权限提升，因为无论用户权限如何都可以读取附件。 MyBB 1.4.2 MyBB ----...

MyBB 1.4.2: Multiple Vulnerabilties

====================================================================== Advisory: MyBB 1.4.2 - Multiple Vulnerabilities Release Date: October 27 2008 Application: MyBB Version: MyBB 1.4.2 Platform: PHP Vendor URL: http://www.mybboard.net/ Authors: Kellanved, NeoThermic, Techie-Micheal...

MyBB moderation.php跨站脚本执行漏洞

BUGTRAQ ID: 31935 MyBB是一款流行的Web论坛程序。 MyBB moderation.php文件中的redirect函数使用AJAX开关允许JavaScript重新定向，如果用户在请求中包含有htmlspecialchars无法转义的单引号的话，就可以执行跨站脚本攻击，导致以提升的权限执行任意操作，包括PHP和SQL注入。 MyBB 1.4.2 MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...

MyBB 1.4.2 - moderation.php Cross-Site Scripting

MyBB 1.4.2 - moderation.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31935/info MyBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in t...