Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*

part: a version: 1.4.10 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMybb (0a7c5598-1dcf-5314-89b1-60f621a820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/mybb purl2cpe 2026-06-01 10:11:09.774085

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7288 vulnerable 2026-06-08 05:05:09.436728 Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7275 vulnerable 2026-06-08 05:05:09.286569 Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2327 vulnerable 2026-06-08 05:02:03.579975 Details available
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-17T02:58:18.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2326 vulnerable 2026-06-08 05:02:03.578278 Details available
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T16:37:30.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2325 vulnerable 2026-06-08 05:02:03.576545 Details available
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-16T23:55:43.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2324 vulnerable 2026-06-08 05:02:03.567929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5133 vulnerable 2026-06-08 04:59:34.850493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5132 vulnerable 2026-06-08 04:59:34.848985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5131 vulnerable 2026-06-08 04:59:34.841597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5096 vulnerable 2026-06-08 04:56:32.166594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4629 vulnerable 2026-06-08 04:56:29.742834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4628 vulnerable 2026-06-08 04:56:29.741699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4627 vulnerable 2026-06-08 04:56:29.740384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4626 vulnerable 2026-06-08 04:56:29.739261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4625 vulnerable 2026-06-08 04:56:29.737974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4624 vulnerable 2026-06-08 04:56:29.736591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4813 vulnerable 2026-06-08 04:51:50.016559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4449 vulnerable 2026-06-08 04:51:48.550979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4448 vulnerable 2026-06-08 04:51:48.550368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.