CVE-2018-14724

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...

CVE-2018-14724

CVE-2018-14724 – MyBB Ban List 1.0 (Ban List plugin) :Vulnerability exists in the Ban List plugin for MyBB where any forum user with moderator privileges can ban others and inject an XSS payload into the ban reason, which is executed on bans.php. Public materials confirm the affected component (B...

CVE-2018-14575

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting XSS via a thread subject and a cross-site request forgery CSRF via a post subject...

CVE-2018-14575

Affected software and context : The issue concerns the MyBB plugin “Trash Bin” version 1.1.3, which augments the Admin Control Panel to recover permanently deleted threads and posts. The vulnerability chain is detailed across multiple sources (CVE-2018-14575, Red Hat advisory, NVD entry) and appe...

CVE-2019-9650

An XSS issue was discovered in upcomingevents.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event...

Cross site scripting

An XSS issue was discovered in upcomingevents.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event...

CVE-2019-9650

The CVE-2019-9650 entry describes an XSS vulnerability in the MyBB Upcoming Events plugin (prior to version 1.33). The flaw resides in upcoming_events.php where a crafted event name can trigger cross-site scripting. Public details across connected sources confirm the affected component and versio...

CVE-2019-9650

An XSS issue was discovered in upcomingevents.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event...

Upcoming Events Cross-Site Scripting Vulnerability

MyBB MyBulletinBoard is MyBB team developed a set of PHP and MySQL development of free and Web-based forum software. The software is easy to use , multi-language support , scalable , etc. Upcoming Events plugin is used in which a schedule management plugin . A cross-site scripting vulnerability...

FreeBSD : mybb -- vulnerabilities (395ed9d5-3cca-11e9-9ba0-4c72b94353b5)

mybb Team reports : Medium risk: Reset Password reflected XSS Medium risk: ModCP Profile Editor username reflected XSS Low risk: Predictable CSRF token for guest users Low risk: ACP Stylesheet Properties XSS Low risk: Reset Password username enumeration via email C Tenable Network Security, Inc...

mybb -- vulnerabilities

mybb Team reports: Medium risk: Reset Password reflected XSS Medium risk: ModCP Profile Editor username reflected XSS Low risk: Predictable CSRF token for guest users Low risk: ACP Stylesheet Properties XSS Low risk: Reset Password username enumeration via email...

MyBB 1.6.x ChangUonDyU Chatbox 3.6.0 Cross Site Scripting

Exploit Title : MyBB 1.6.x ChangUonDyU Chatbox Plugins 3.6.0 Cross Site Scripting Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : mybb.com Software Download Link : destek.mybb.com.tr/attachment.php?aid=742 Software Information Links ...

MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit for php platform in category web applications Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE:...

MyBB Trash Bin 1.1.3 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Date: 7/17/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2018-14575 1. Description: Creates a...

MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting Cross-Site Request Forgery

MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting Cross-Site Request Forgery Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Date: 7/17/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version...

MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / CSRF Date: 7/17/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=957 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2018-14575 1. Description: Creates a...

MyBB Bans List 1.0 Cross Site Scripting

Exploit Title: MyBB Bans List - Cross Site Scripting Date: 7/25/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=423 Version: 1.0 Tested on: Ubuntu 18.04 CVE: CVE-2018-14724 1. Description: Adds bans.php page, showing a li...

MyBB Bans List 1.0 - Cross-Site Scripting

MyBB Bans List 1.0 - Cross-Site Scripting Exploit Title: MyBB Bans List - Cross Site Scripting Date: 7/25/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=423 Version: 1.0 Tested on: Ubuntu 18.04 CVE: CVE-2018-14724 1...

MyBB Bans List 1.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Bans List - Cross Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=423 Version: 1.0 Tested on: Ubuntu 18.04 CVE: CVE-2018-14724 1...

MyBB Bans List 1.0 - Cross-Site Scripting

Exploit Title: MyBB Bans List - Cross Site Scripting Date: 7/25/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=423 Version: 1.0 Tested on: Ubuntu 18.04 CVE: CVE-2018-14724 1. Description: Adds bans.php page, showing a li...