Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/mybb purl2cpe 2026-06-01 10:11:09.774070

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7288 vulnerable 2026-06-08 05:05:09.436163 Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7275 vulnerable 2026-06-08 05:05:09.271454 Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2327 vulnerable 2026-06-08 05:02:03.579469 Details available
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-17T02:58:18.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2326 vulnerable 2026-06-08 05:02:03.577841 Details available
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T16:37:30.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2325 vulnerable 2026-06-08 05:02:03.576106 Details available
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T23:55:43.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2324 vulnerable 2026-06-08 05:02:03.552274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5133 vulnerable 2026-06-08 04:59:34.850099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5132 vulnerable 2026-06-08 04:59:34.848589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5131 vulnerable 2026-06-08 04:59:34.828208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5096 vulnerable 2026-06-08 04:56:32.158162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4629 vulnerable 2026-06-08 04:56:29.742510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4628 vulnerable 2026-06-08 04:56:29.741237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4627 vulnerable 2026-06-08 04:56:29.740056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4626 vulnerable 2026-06-08 04:56:29.738939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4625 vulnerable 2026-06-08 04:56:29.737515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4624 vulnerable 2026-06-08 04:56:29.724092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3967 vulnerable 2026-06-08 04:50:37.371028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3966 vulnerable 2026-06-08 04:50:37.369930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3965 vulnerable 2026-06-08 04:50:37.367027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3334 vulnerable 2026-06-08 04:50:34.273103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0622 vulnerable 2026-06-08 04:49:32.893179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.