CVE-2008-3069

Multiple cross-site scripting XSS vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 portal.php and 2 inc/functionspost.php...

CVE-2008-3071

Directory traversal vulnerability in inc/classlanguage.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable...

Directory traversal

Directory traversal vulnerability in inc/classlanguage.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable...

CVE-2008-3069

Multiple cross-site scripting XSS vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 portal.php and 2 inc/functionspost.php...

CVE-2008-3069

CVE-2008-3069 corresponds to multiple cross-site scripting (XSS) flaws in MyBB prior to version 1.2.13. The affected components are (1) portal.php and (2) inc/functions_post.php, with the root cause described as untrusted input leading to script/HTML injection. This could enable remote attackers ...

CVE-2008-3071

CVE-2008-3071 is a directory traversal vulnerability in MyBB’s code path inc/class_language.php, affecting versions before 1.2.13. The issue is tied to the $language variable, with the connected documents not providing concrete details on impact level, exploit vectors, or a confirmed root cause b...

CVE-2008-3071

Directory traversal vulnerability in inc/classlanguage.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $language variable...

CVE-2008-3070

CVE-2008-3070 affects the MyBB code path in inc/datahandler/user.php for versions before 1.2.13 . The vulnerability is described as an “unspecified vulnerability” with unknown impact and attack vectors related to the $user['language'] variable, probably tied to an SQL injection issue. According t...

CVE-2008-3070

Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user'language' variable, probably related to SQL injection...

MyBB 1.2.13版本之前存在多个未明漏洞

BUGTRAQ ID: 30113 CNCAN ID：CNCAN-2008070804 MyBB是一款流行的WEB论坛程序。 MyBB存在多个未明安全问题，目前没有详细漏洞细节提供。 MyBulletinBoard MyBulletinBoard 1.2.12 MyBulletinBoard MyBulletinBoard 1.2.11 MyBulletinBoard MyBulletinBoard 1.2.10 MyBulletinBoard MyBulletinBoard 1.2.5 MyBulletinBoard MyBulletinBoard 1.2.3...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability =============================================================== MyBulletin Board MyBB Plugin "Custom Pages 1.0"...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBB Plugin Custom Pages 1.0 - SQL Injection MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

Sql injection

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...

CVE-2008-0787

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...

CVE-2008-0788

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

CVE-2008-0788

CVE-2008-0788 describes multiple CSRF vulnerabilities in MyBB 1.2.11 and earlier. The issues allow remote attackers to hijack authentication for actions performed via moderation.php (do_multideletethreads) to delete threads, and via private.php (delete) to remove private messages. Affected produc...

CVE-2008-0787

The CVE-2008-0787 entry concerns MyBB

CVE-2008-0788

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

CVE-2008-0787

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...