Lucene search

K

5 matches found

CVE
CVE
added 2017/01/31 10:59 p.m.41 views

CVE-2015-8974

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

10CVSS9.8AI score0.03692EPSS
CVE
CVE
added 2017/01/31 10:59 p.m.40 views

CVE-2015-8973

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.

8.3CVSS7.9AI score0.00384EPSS
CVE
CVE
added 2017/01/31 10:59 p.m.33 views

CVE-2015-8976

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade files."

6.1CVSS5.9AI score0.00316EPSS
CVE
CVE
added 2017/01/31 10:59 p.m.31 views

CVE-2015-8975

Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS6AI score0.00418EPSS
CVE
CVE
added 2017/01/31 10:59 p.m.27 views

CVE-2015-8977

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation path via vectors involving error log files.

7.5CVSS7.3AI score0.01218EPSS