Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*

part: a version: 1.4.2 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/mybb purl2cpe 2026-06-01 10:11:09.774095

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7288 vulnerable 2026-06-08 05:05:09.436596 Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7275 vulnerable 2026-06-08 05:05:09.282222 Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2327 vulnerable 2026-06-08 05:02:03.579841 Details available
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-17T02:58:18.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2326 vulnerable 2026-06-08 05:02:03.578140 Details available
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T16:37:30.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2325 vulnerable 2026-06-08 05:02:03.576413 Details available
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T23:55:43.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2324 vulnerable 2026-06-08 05:02:03.563318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5133 vulnerable 2026-06-08 04:59:34.850364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5132 vulnerable 2026-06-08 04:59:34.848854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5131 vulnerable 2026-06-08 04:59:34.837081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5096 vulnerable 2026-06-08 04:56:32.164090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4629 vulnerable 2026-06-08 04:56:29.742753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4628 vulnerable 2026-06-08 04:56:29.741619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4627 vulnerable 2026-06-08 04:56:29.740306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4626 vulnerable 2026-06-08 04:56:29.739182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4625 vulnerable 2026-06-08 04:56:29.737890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4624 vulnerable 2026-06-08 04:56:29.733688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4930 vulnerable 2026-06-08 04:50:48.657378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4929 vulnerable 2026-06-08 04:50:48.657046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4928 vulnerable 2026-06-08 04:50:48.656410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.