2260 matches found
MyBB <= 1.8.20: From Stored XSS to RCE
Impact Your browser does not support the video tag. We discovered a Stored XSS vulnerability that occured due to a parsing error in posts and private messages in MyBB 1.8.20 and prior versions, as well as an authenticated Remote Code Execution vulnerability that can be exploited by administrators...
mybb -- vulnerabilities
mybb Team reports: High risk: Theme import stylesheet name RCE High risk: Nested video MyCode persistent XSS Medium risk: Find Orphaned Attachments reflected XSS Medium risk: Post edit reflected XSS Medium risk: Private Messaging folders SQL injection Low risk: Potential phar deserialization...
MyBB Cross-Site Scripting Vulnerability (CNVD-2019-16947)
MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A cross-site scripting vulnerability exists in MyBB version 1.8.19, which can be exploited by attacker...
Cross site scripting
MyBB 1.8.19 has XSS in the resetpassword function...
Cross site request forgery (csrf)
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter...
CVE-2019-3578
MyBB 1.8.19 has XSS in the resetpassword function...
CVE-2019-3579
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter...
CVE-2019-3579
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter...
CVE-2019-3578
MyBB 1.8.19 has XSS in the resetpassword function...
CVE-2019-3578
MyBB 1.8.19 has XSS in the resetpassword function...
CVE-2019-3578
CVE-2019-3578 affects MyBB 1.8.19 and is a Cross-Site Scripting (XSS) vulnerability in the resetpassword function. The available connected documents indicate the issue is an XSS in the resetpassword flow, enabling potential execution of client-side code. Details do not specify attack vectors beyo...
CVE-2019-3579
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter...
CVE-2019-3579
Summary : CVE-2019-3579 affects MyBB 1.8.19, where a password-reset request that omits the code parameter discloses the username, enabling information disclosure. This is a server-side information leak in the password-reset flow that does not require authentication. The vulnerability is documente...
PT-2019-16626 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.19 Description: The issue is related to a problem in the resetpassword function, which has XSS. Recommendations: For MyBB version 1.8.19, update to a newer version that contains a fix for this issue...
PT-2019-16627 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.19 Description: The issue allows remote attackers to obtain sensitive information. This occurs because the software discloses the username when it receives a password-reset request that lacks the code parameter...
MyBB <= 1.8.19 Multiple XSS Vulnerabilities
MyBB is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...
Cross site scripting
A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsettingbburl' parameter...
CVE-2018-19202
A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsettingbburl' parameter...