MyBB (aka MyBulletinBoard) 1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*
part: a version: 1.2 update: *
| Vendor | Mybb (8821e130-2590-5689-a7de-85bc65b3bdf4) |
|---|---|
| Product | Mybb (0a7c5598-1dcf-5314-89b1-60f621a820e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mybb/mybb |
purl2cpe | 2026-06-01 10:11:09.774059 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25250 |
vulnerable | 2026-06-08 05:11:29.671372 |
MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS
HIGH (7.2)
MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users visit the attacker's profile page.
Published: 2026-04-04T13:51:14.951Z
Updated: 2026-05-24T01:36:16.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7288 |
vulnerable | 2026-06-08 05:05:09.436108 |
Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7275 |
vulnerable | 2026-06-08 05:05:09.269791 |
Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5133 |
vulnerable | 2026-06-08 04:59:34.850051 |
Details available
Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."
Published: 2012-08-30T22:00:00.000Z
Updated: 2024-09-17T00:51:26.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5132 |
vulnerable | 2026-06-08 04:59:34.848542 |
Details available
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."
Published: 2012-08-30T22:00:00.000Z
Updated: 2024-08-07T00:23:40.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5131 |
vulnerable | 2026-06-08 04:59:34.826216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5096 |
vulnerable | 2026-06-08 04:56:32.158106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4629 |
vulnerable | 2026-06-08 04:56:29.742463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4628 |
vulnerable | 2026-06-08 04:56:29.741191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4627 |
vulnerable | 2026-06-08 04:56:29.740008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4626 |
vulnerable | 2026-06-08 04:56:29.738892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4625 |
vulnerable | 2026-06-08 04:56:29.737466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4624 |
vulnerable | 2026-06-08 04:56:29.722082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3967 |
vulnerable | 2026-06-08 04:50:37.370977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3966 |
vulnerable | 2026-06-08 04:50:37.369879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3965 |
vulnerable | 2026-06-08 04:50:37.366930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.