MyBB (aka MyBulletinBoard) 1.4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:mybboard:mybb:1.4.3:*:*:*:*:*:*:*
part: a version: 1.4.3 update: *
| Vendor | Mybboard (77ae3ac2-4413-5f09-80ae-e5ac370ea890) |
|---|---|
| Product | Mybb (b19a7865-6053-587d-a911-e97df28e110d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mybb/mybb |
purl2cpe | 2026-06-01 10:12:16.838517 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-5096 |
vulnerable | 2026-06-08 04:56:32.171790 |
Details available
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a (1) do_search action to search.php or (2) do_stuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this doesn't lead to an SQL injection, it does provide a general MyBB SQL error.
Published: 2012-08-13T23:00:00.000Z
Updated: 2024-09-17T04:10:28.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7082 |
vulnerable | 2026-06-08 04:51:05.586757 |
Details available
MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header.
Published: 2009-08-25T10:00:00.000Z
Updated: 2024-08-07T11:56:14.019Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.