Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown

CVE-2014-5248

Disclosure Date: August 14, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode.
0
0
Attacker Value
Unknown

CVE-2014-1840

Disclosure Date: March 03, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.
0
0
Attacker Value
Unknown

CVE-2013-7288

Disclosure Date: January 10, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
0
0
Attacker Value
Unknown

CVE-2013-7275

Disclosure Date: January 08, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
0
0
Attacker Value
Unknown

CVE-2011-5132

Disclosure Date: August 30, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."
0
0
Attacker Value
Unknown

CVE-2011-5131

Disclosure Date: August 30, 2012 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter.
0
0
Attacker Value
Unknown

CVE-2011-5133

Disclosure Date: August 30, 2012 (last updated October 05, 2023)
Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."
0
0
Attacker Value
Unknown

CVE-2011-3759

Disclosure Date: September 23, 2011 (last updated October 04, 2023)
MyBB (aka MyBulletinBoard) 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files.
0
0
Attacker Value
Unknown

CVE-2010-4522

Disclosure Date: December 30, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.
0
0