MyBB 1.4.2 - moderation.php Cross-Site Scripting

MyBB 1.4.2 - moderation.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31935/info MyBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in t...

MyBB 1.4.2 - 'moderation.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31935/info MyBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

MyBB 1.4.2存在多个安全漏洞

BUGTRAQ ID: 31295 CNCAN ID：CNCAN-2008092311 MyBB是一款基于PHP的论坛程序。 MyBB不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本等攻击。 -通过URL传递的输入在返回给用户前缺少过滤，可导致在目标用户浏览器上执行任意HTML和脚本代码。 -文件global.php, announcements.php, admin/inc/classpage.php, inc/functions.php, inc/datahandlers/post.php, inc/classerror.php, polls.php,...

MyBB < 1.4.1 Multiple Vulnerabilities

Binary data 4688.prm...

MyBB < 1.4.1 Multiple Vulnerabilities

Binary data 4655.prm...

MyBB 1.41版本之前多个未明漏洞

BUGTRAQ ID: 31104 CVE ID：CVE-2008-3965 CVE-2008-3966 CVE-2008-3967 CNCVE ID：CNCVE-20083965 CNCVE-20083966 CNCVE-20083967 MyBB是一款基于PHP的论坛程序。 MyBB存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息等攻击。 目前没有详细漏洞细节提供。 MyBulletinBoard MyBulletinBoard 1.4 MyBulletinBoard MyBulletinBoard 1.2.12 MyBulletinBoard MyBulletinBoard...

CVE-2008-3966

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via 1 a certain referrer field in usercp2.php, 2 a certain location field in inc/functionsonline.php, and certain 3 tsubject and 4 psubject fiel...

CVE-2008-3965

SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...

CVE-2008-3967

moderation.php in MyBB aka MyBulletinBoard before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors...

Design/Logic Flaw

moderation.php in MyBB aka MyBulletinBoard before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via 1 a certain referrer field in usercp2.php, 2 a certain location field in inc/functionsonline.php, and certain 3 tsubject and 4 psubject fiel...

Sql injection

SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...

CVE-2008-3966

CVE-2008-3966 affects MyBB (MyBulletinBoard) up to version 1.4.1. It enables remote XSS via (1) a referrer field in usercp2.php, (2) a location field in inc/functions_online.php, and (3) tsubject and (4) psubject fields in moderation.php. The vulnerability allows injection of arbitrary web script...

CVE-2008-3966

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via 1 a certain referrer field in usercp2.php, 2 a certain location field in inc/functionsonline.php, and certain 3 tsubject and 4 psubject fiel...

CVE-2008-3965

MyBB (aka MyBulletinBoard) before 1.4.1 contains an SQL injection in misc.php via a certain editor field, allowing remote attackers to execute arbitrary SQL commands. The issue affects MyBB versions up to 1.4.1; upgrading to 1.4.1 or newer is the documented remediation. No exploitation details or...

CVE-2008-3965

SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...

CVE-2008-3967

moderation.php in MyBB aka MyBulletinBoard before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors...

CVE-2008-3967

The CVE-2008-3967 entry concerns MyBB (MyBulletinBoard) moderation.php prior to version 1.4.1, where moderator privilege checks are not performed correctly. The description notes unknown impact and remote attack vectors. Public references corroborate the version boundary (before 1.4.1) but do not...

CVE-2008-3965: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in misc.php in MyBB aka MyBulletinBoard before 1.4.1 allows remote attackers to execute arbitrary SQL commands via a certain editor field...

CVE-2008-3967: Undefined Security Weakness

moderation.php in MyBB aka MyBulletinBoard before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors...