GCVE - cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*

part: a version: 1.0 update: rc1

Vendor	Mybb (`8821e130-2590-5689-a7de-85bc65b3bdf4`)
Product	Mybb (`0a7c5598-1dcf-5314-89b1-60f621a820e9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mybb/mybb`	purl2cpe	2026-06-01 10:11:09.774039

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7288`	vulnerable	2026-06-08 05:05:09.435850	Details available Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs. Published: 2014-01-10T16:00:00.000Z Updated: 2024-09-17T01:50:54.525Z Open on db.gcve.eu Reference links https://github.com/mybb/mybb/commit/238696e37d6a22b89e6bba11e4de3e6620cb5547 http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release http://secunia.com/advisories/55945 http://www.securityfocus.com/bid/64570 http://osvdb.org/show/osvdb/101544	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7275`	vulnerable	2026-06-08 05:05:09.261718	Details available Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup. Published: 2014-01-08T15:00:00.000Z Updated: 2024-09-16T19:45:42.403Z Open on db.gcve.eu Reference links https://github.com/mybb/mybb/commit/6212bc954d72caf591e141ca36b8df964387bee8 http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release http://secunia.com/advisories/55945 http://www.securityfocus.com/bid/64570 http://osvdb.org/101545	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2327`	vulnerable	2026-06-08 05:02:03.579200	Details available MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message. Published: 2012-08-13T18:00:00.000Z Updated: 2024-09-17T02:58:18.551Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/53417 http://www.openwall.com/lists/oss-security/2012/05/07/13 http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/ http://www.openwall.com/lists/oss-security/2012/05/07/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2326`	vulnerable	2026-06-08 05:02:03.577484	Details available Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment. Published: 2012-08-13T18:00:00.000Z Updated: 2024-09-16T16:37:30.858Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/53417 http://www.openwall.com/lists/oss-security/2012/05/07/13 http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/ http://www.openwall.com/lists/oss-security/2012/05/07/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2325`	vulnerable	2026-06-08 05:02:03.575817	Details available SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors. Published: 2012-08-13T18:00:00.000Z Updated: 2024-09-16T23:55:43.800Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/53417 http://www.openwall.com/lists/oss-security/2012/05/07/13 http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/ http://www.openwall.com/lists/oss-security/2012/05/07/14	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2324`	vulnerable	2026-06-08 05:02:03.542698	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5096`	vulnerable	2026-06-08 04:56:32.156322	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0218`	vulnerable	2026-06-08 04:48:53.124125	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4199`	vulnerable	2026-06-08 04:48:43.216818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.