Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*

part: a version: 1.2.6 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/mybb purl2cpe 2026-06-01 10:11:09.774075

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7288 vulnerable 2026-06-08 05:05:09.436347 Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7275 vulnerable 2026-06-08 05:05:09.273747 Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2327 vulnerable 2026-06-08 05:02:03.579531 Details available
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-17T02:58:18.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2326 vulnerable 2026-06-08 05:02:03.577906 Details available
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T16:37:30.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2325 vulnerable 2026-06-08 05:02:03.576181 Details available
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T23:55:43.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2324 vulnerable 2026-06-08 05:02:03.554381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5133 vulnerable 2026-06-08 04:59:34.850170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5132 vulnerable 2026-06-08 04:59:34.848658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5131 vulnerable 2026-06-08 04:59:34.830215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5096 vulnerable 2026-06-08 04:56:32.158231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4629 vulnerable 2026-06-08 04:56:29.742573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4628 vulnerable 2026-06-08 04:56:29.741443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4627 vulnerable 2026-06-08 04:56:29.740119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4626 vulnerable 2026-06-08 04:56:29.739002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4625 vulnerable 2026-06-08 04:56:29.737580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4624 vulnerable 2026-06-08 04:56:29.726352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3967 vulnerable 2026-06-08 04:50:37.371093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3966 vulnerable 2026-06-08 04:50:37.369998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3965 vulnerable 2026-06-08 04:50:37.367100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3334 vulnerable 2026-06-08 04:50:34.275042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.