Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mybulletinboard mybulletinboard vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2008-6198
SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote malicious users to execute arbitrary SQL commands via the page parameter.
Mybboard Custom Pages Plugin 1.0
1 EDB exploit
5
CVSSv2
CVE-2011-5035
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allo...
Oracle Glassfish Server
Oracle Glassfish Server 2.1.1
Oracle Glassfish Server 3.0.1
1 EDB exploit
4.3
CVSSv2
CVE-2015-2332
Cross-site scripting (XSS) vulnerability in member.php in MyBB (aka MyBulletinBoard) prior to 1.8.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Mybb Mybb
4.3
CVSSv2
CVE-2016-9413
The Admin control panel in MyBB (aka MyBulletinBoard) prior to 1.8.7 and MyBB Merge System prior to 1.8.7 allows remote malicious users to conduct clickjacking attacks via unspecified vectors.
Mybb Mybb
Mybb Merge System
7.5
CVSSv2
CVE-2016-9403
newreply.php in MyBB (aka MyBulletinBoard) prior to 1.8.7 and MyBB Merge System prior to 1.8.7 allows remote malicious users to have unspecified impact by leveraging a missing permission check.
Mybb Merge System
Mybb Mybb
7.5
CVSSv2
CVE-2016-9412
MyBB (aka MyBulletinBoard) prior to 1.8.7 and MyBB Merge System prior to 1.8.7 allow malicious users to have unspecified impact via vectors related to low adminsid and sid entropy.
Mybb Mybb
Mybb Merge System
7.5
CVSSv2
CVE-2016-9420
MyBB (aka MyBulletinBoard) prior to 1.8.8 and MyBB Merge System prior to 1.8.8 allow remote malicious users to have unspecified impact via vectors related to "loose comparison false positives."
Mybb Mybb
Mybb Merge System
5
CVSSv2
CVE-2012-2327
MyBB (aka MyBulletinBoard) prior to 1.6.7 allows remote malicious users to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Mybb Mybb 1.6.5
Mybb Mybb 1.4.14
Mybb Mybb 1.4.12
Mybb Mybb 1.4.7
Mybb Mybb 1.4.5
Mybb Mybb 1.4.3
Mybb Mybb 1.5.2
Mybb Mybb 1.2.14
Mybb Mybb 1.2.7
Mybb Mybb 1.2.5
Mybb Mybb 1.2.0
Mybb Mybb 1.1.7
Mybb Mybb 1.1.5
Mybb Mybb 1.1.0
Mybb Mybb 1.03
Mybb Mybb 1.0
Mybb Mybb 1.6.3
Mybb Mybb 1.6.2
Mybb Mybb 1.6.1
Mybb Mybb 1.4.16
Mybb Mybb 1.4.2
Mybb Mybb 1.4.1
5
CVSSv2
CVE-2016-9414
MyBB (aka MyBulletinBoard) prior to 1.8.7 and MyBB Merge System prior to 1.8.7 allow remote malicious users to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Mybb Merge System
Mybb Mybb
4.3
CVSSv2
CVE-2015-2333
Cross-site scripting (XSS) vulnerability in the MyCode editor in MyBB (aka MyBulletinBoard) prior to 1.8.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Mybb Mybb
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »