Approved changes feed: RSS · Atom

cpe:2.3:a:mybb_group:forum_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMybb Group (91bfa5ca-23ce-5081-87d0-f9dd098a90f7)
ProductForum Software (b127c043-0391-5d06-a1cd-1dcad9603c74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-10018 vulnerable 2026-06-08 04:56:40.591077 myBB 1.6.4 Backdoor Arbitrary Command Execution
myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduced during packaging and was not part of the intended application logic. Exploitation requires no authentication and results in full compromise of the web server under the context of the web application.
Published: 2025-08-13T20:35:31.755Z
Updated: 2026-04-07T14:02:09.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.