Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mybb mybb 1.6.6 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2012-5908
Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote malicious users to inject arbitrary web script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php.
Mybb Mybb 1.6.6
1 EDB exploit
7.5
CVSSv2
CVE-2012-5909
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote malicious users to execute arbitrary SQL commands via the conditions[usergroup][] parameter in a search action to admin/index.php.
Mybb Mybb 1.6.6
1 EDB exploit
4.3
CVSSv2
CVE-2014-1840
Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.
Mybb Mybb 1.6.10
Mybb Mybb 1.6.2
Mybb Mybb 1.6.7
Mybb Mybb 1.6.9
Mybb Mybb
Mybb Mybb 1.6.0
Mybb Mybb 1.6.3
Mybb Mybb 1.6.4
Mybb Mybb 1.6.5
Mybb Mybb 1.6.6
Mybb Mybb 1.6.1
Mybb Mybb 1.6.11
Mybb Mybb 1.6.8
4.3
CVSSv2
CVE-2014-5248
Cross-site scripting (XSS) vulnerability in MyBB prior to 1.6.15 allows remote malicious users to inject arbitrary web script or HTML via vectors related to video MyCode.
Mybb Mybb 1.6.5
Mybb Mybb 1.6.3
Mybb Mybb
Mybb Mybb 1.6.9
Mybb Mybb 1.6.8
Mybb Mybb 1.6.7
Mybb Mybb 1.6.12
Mybb Mybb 1.6.11
Mybb Mybb 1.6.10
Mybb Mybb 1.6.1
Mybb Mybb 1.6.13
Mybb Mybb 1.6.6
Mybb Mybb 1.6.4
Mybb Mybb 1.6.2
Mybb Mybb 1.6.0
4.3
CVSSv2
CVE-2013-7275
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) prior to 1.6.12 allows remote malicious users to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Mybb Mybb 1.6.8
Mybb Mybb 1.4.9
Mybb Mybb 1.4.8
Mybb Mybb 1.4.7
Mybb Mybb 1.4.6
Mybb Mybb 1.3
Mybb Mybb 1.2.9
Mybb Mybb 1.2.8
Mybb Mybb 1.2.7
Mybb Mybb 1.2
Mybb Mybb 1.1.8
Mybb Mybb 1.1.7
Mybb Mybb 1.1.6
Mybb Mybb 1.0
Mybb Mybb 1.6.6
Mybb Mybb 1.6.5
Mybb Mybb 1.6.4
Mybb Mybb 1.6.3
Mybb Mybb 1.6.2
Mybb Mybb 1.4.16
Mybb Mybb 1.4.15
Mybb Mybb 1.4.14
4.3
CVSSv2
CVE-2013-7288
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) prior to 1.6.12 allows remote malicious users to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Mybb Mybb 1.6.6
Mybb Mybb 1.6.5
Mybb Mybb 1.6.4
Mybb Mybb 1.6.3
Mybb Mybb 1.6.2
Mybb Mybb 1.4.16
Mybb Mybb 1.4.15
Mybb Mybb 1.4.14
Mybb Mybb 1.4.13
Mybb Mybb 1.2.2
Mybb Mybb 1.2.14
Mybb Mybb 1.2.13
Mybb Mybb 1.2.12
Mybb Mybb 1.1.0
Mybb Mybb 1.04
Mybb Mybb 1.03
Mybb Mybb 1.02
Mybb Mybb 1.6.10
Mybb Mybb 1.6.7
Mybb Mybb 1.6.0
Mybb Mybb 1.5.1
Mybb Mybb 1.4.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started