63 matches found
CVE-2026-45116
MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in stored JavaScript code injection. UserDataHandler::verifyprofilefields only performs the specialized validation when...
EUVD-2014-5144
Malware in sbrugna...
EUVD-2021-14044
Malware in sbrugna...
EUVD-2020-7229
Malware in sbrugna...
EUVD-2018-8906
Malware in sbrugna...
EUVD-2015-2426
Malware in sbrugna...
EUVD-2017-17066
Malware in sbrugna...
EUVD-2025-11805
Malicious code in bioql PyPI...
EUVD-2023-50480
Malicious code in bioql PyPI...
EUVD-2022-46689
Malicious code in bioql PyPI...
The vulnerability of the “Add Mycode” function in the MyBB forum creation software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the “Add Mycode” function in the MyBB forum creation software is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2021-27279
MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
CVE-2025-29460
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...
CVE-2025-29460
The CVE-2025-29460 entry concerns MyBB 1.8.38. The vulnerability affects the Add Mycode function, enabling a remote attacker to obtain sensitive information. Core product: MyBB (PHP/MySQL-based forum software). Root cause: mishandling of the Add Mycode feature, as described across multiple source...
MyBB 安全漏洞
MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB version 1.8.38, which stems from the mishandling of the Add...
CVE-2025-29460
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...
PT-2025-17242 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.38 Description: The issue allows a remote attacker to obtain sensitive information via the Add Mycode function. Recommendations: For MyBB version 1.8.38, at the moment, there is no information about a newer version that...