Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mybb mybb vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2021-27946
SQL Injection vulnerability in MyBB prior to 1.8.26 via poll vote count. (issue 1 of 3).
Mybb Mybb
6.5
CVSSv2
CVE-2021-27947
SQL Injection vulnerability in MyBB prior to 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).
Mybb Mybb
6.5
CVSSv2
CVE-2021-27948
SQL Injection vulnerability in MyBB prior to 1.8.26 via User Groups. (issue 3 of 3).
Mybb Mybb
NA
CVE-2022-43709
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.
Mybb Mybb
4.3
CVSSv2
CVE-2020-15139
In MyBB before version 1.8.24, the custom MyCode (BBCode) for the visual editor doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. The weakness can be exploited by pointing a victim to a page where the visual editor is active (e.g....
Mybb Mybb
4
CVSSv2
CVE-2017-7566
MyBB prior to 1.8.11 allows remote malicious users to bypass an SSRF protection mechanism.
Mybb Mybb
4.3
CVSSv2
CVE-2008-3069
Multiple cross-site scripting (XSS) vulnerabilities in MyBB prior to 1.2.13 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters to (1) portal.php and (2) inc/functions_post.php.
Mybb Mybb
7.5
CVSSv2
CVE-2008-3071
Directory traversal vulnerability in inc/class_language.php in MyBB prior to 1.2.13 has unknown impact and attack vectors related to the $language variable.
Mybb Mybb
6.5
CVSSv2
CVE-2021-43281
MyBB prior to 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported ty...
Mybb Mybb
NA
CVE-2023-45556
Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local malicious user to execute arbitrary code via the theme Name parameter in the theme management component.
Mybb Mybb
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »