2260 matches found
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
Sql injection
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...
Cross site scripting
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools...
CVE-2021-27947
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
Sql injection
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. issue 3 of 3...
CVE-2021-27890
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...
CVE-2021-27949
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools...
CVE-2021-27949
CVE-2021-27949: MyBB prior to 1.8.26 is vulnerable to Cross-site Scripting via the Custom moderator tools. The issue affects the MyBB web forum software (PHP/MySQL) and is triggered through inputs handled by moderator tools, enabling injected scripts to run in a victim’s browser. The recommended ...
CVE-2021-27889
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
CVE-2021-27889
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
Cross site scripting
Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...
CVE-2021-27948
CVE-2021-27948 affects MyBB before 1.8.26, via the User Groups component, caused by a SQL injection vulnerability in the user groups logic. The vulnerability can impact confidentiality, integrity and availability (per CVSS metrics). Mitigation: upgrade MyBB to 1.8.26 or later (or apply vendor-sup...
CVE-2021-27948
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. issue 3 of 3...
CVE-2021-27947
CVE-2021-27947 describes a SQL injection in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. Affected: MyBB versions prior to 1.8.26. Root cause: unsafe handling of input in the Copy Forum functionality leading to SQL injection. Impacts documented include potential data exposure...
CVE-2021-27947
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...
CVE-2021-27946
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...
CVE-2021-27946
CVE-2021-27946 : MyBB before 1.8.26 is vulnerable to an SQL injection in the poll vote count due to lack of sanitization of the votes[] parameter in Edit Poll. Exploitation can occur during a Move/Copy operation and may enable privilege escalation for moderators/administrators in some configurati...
CVE-2021-27890
Summary of CVE-2021-27890 (MyBB SQL Injection) Affects MyBB versions prior to 1.8.26, where a SQL injection vulnerability exists via theme properties included in theme XML files. The issue is described as a SQL Injection vulnerability without publicly detailed exploit steps in the initial descrip...