2280 matches found
CVE-2018-6844
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...
Design/Logic Flaw
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...
CVE-2018-6844
CVE-2018-6844 affects MyBB 1.8.14 and represents a cross-site scripting (XSS) vulnerability exposed via the Title or Description field on the Edit Forum screen. The connected documents consistently describe this XSS in MyBB 1.8.14, but they do not provide concrete details on the underlying code p...
CVE-2018-6844
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...
FreeBSD : mybb -- multiple vulnerabilities (addad6de-d752-11e7-99bf-00e04c1ea73d)
mybb Team reports : High risk: Language file headers RCE Low risk: Language Pack Properties XSS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...
FreeBSD : mybb -- multiple vulnerabilities (7761288c-d148-11e7-87e5-00e04c1ea73d)
myBB Team reports : High risk: Installer RCE on configuration file write High risk: Language file headers RCE Medium risk: Installer XSS Medium risk: Mod CP Edit Profile XSS Low risk: Insufficient moderator permission check in delayed moderation tools Low risk: Announcements HTML filter bypass Lo...
mybb -- multiple vulnerabilities
mybb Team reports: High risk: Language file headers RCE Low risk: Language Pack Properties XSS...
MyBB 1.8.13 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: XSS in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16781 No HTML escaping when returning an...
MyBB installer cross-site scripting vulnerability
MyBB aka MyBulletinBoard is a free and web-based forum software developed by the MyBB team using PHP and MySQL. The software is easy to use, supports multiple languages, and is extensible. installer is one of the installers. A cross-site scripting vulnerability exists in the installer in MyBB...
MyBB Arbitrary Code Execution Vulnerability
MyBB aka MyBulletinBoard is a free and web-based forum software developed by the MyBB team using PHP and MySQL. The software is easy to use, supports multiple languages, and is extensible. installer is one of the installers. A security vulnerability exists in the installer in versions of MyBB pri...
MyBB < 1.8.13 Multiple Vulnerabilities
MyBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...
MyBB 1.8.13 - Remote Code Execution
Exploit Title: RCE in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16780 This RCE can be executed via CSRF but doesn't require it in some special cases. The...
MyBB 1.8.13 - Remote Code Execution
MyBB 1.8.13 - Remote Code Execution Exploit Title: RCE in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16780 This RCE can be executed via CSRF but doesn't require...
MyBB 1.8.13 - Cross-Site Scripting
MyBB 1.8.13 - Cross-Site Scripting Exploit Title: XSS in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16781 No HTML escaping when returning an $error in...
MyBB 1.8.13 - Cross-Site Scripting
Exploit Title: XSS in MyBB up to 1.8.13 via installer Date: Found on 05-29-2017 Exploit Author: Pablo Sacristan Vendor Homepage: https://mybb.com/ Version: Version 1.8.13 Fixed in 1.8.13 CVE : CVE-2017-16781 No HTML escaping when returning an $error in /install/index.php can lead to an XSS which...
Cross site scripting
The installer in MyBB before 1.8.13 has XSS...
CVE-2017-16780
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file...
Design/Logic Flaw
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file...
