Approved changes feed: RSS · Atom
cpe:2.3:a:mybb:mybb:1.6.2:*:*:*:*:*:*:*
part: a version: 1.6.2 update: *
| Vendor | Mybb (8821e130-2590-5689-a7de-85bc65b3bdf4) |
|---|---|
| Product | Mybb (0a7c5598-1dcf-5314-89b1-60f621a820e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mybb/mybb |
purl2cpe | 2026-06-01 10:11:09.774123 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5248 |
vulnerable | 2026-06-08 05:05:47.284632 |
Details available
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode.
Published: 2014-08-14T18:00:00.000Z
Updated: 2024-09-16T21:04:27.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1840 |
vulnerable | 2026-06-08 05:05:26.413613 |
Details available
Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.
Published: 2014-03-03T16:00:00.000Z
Updated: 2024-08-06T09:50:11.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7288 |
vulnerable | 2026-06-08 05:05:09.436907 |
Details available
Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-09-17T01:50:54.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7275 |
vulnerable | 2026-06-08 05:05:09.292568 |
Details available
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Published: 2014-01-08T15:00:00.000Z
Updated: 2024-09-16T19:45:42.403Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2327 |
vulnerable | 2026-06-08 05:02:03.580140 |
Details available
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Published: 2012-08-13T18:00:00.000Z
Updated: 2024-09-17T02:58:18.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2326 |
vulnerable | 2026-06-08 05:02:03.578441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2325 |
vulnerable | 2026-06-08 05:02:03.576709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2324 |
vulnerable | 2026-06-08 05:02:03.573475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5133 |
vulnerable | 2026-06-08 04:59:34.850665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5132 |
vulnerable | 2026-06-08 04:59:34.849173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5131 |
vulnerable | 2026-06-08 04:59:34.847053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.