Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

Forum

MyBB

MyBB is a free bulletin board system software package developed by the MyBB Group. A lot of thought has gone into the MyBB interface to make it easy to use. MyBB uses a standard discussion board structure so your visitors will feel familiar with the way MyBB works. Your visitors can use the MyBB user control panel to change the way they view discussions.

Official Site:

https://mybb.com/

Severity Summary:

Critical: 11 High: 33 Medium: 75 Low: 2
Reference
Title
Severity
CVE-2016-9403
MyBB Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2017-16780
MyBB Cross-Site Request Forgery (CSRF) Vulnerability
Critical
CVE-2016-9412
MyBB Improper Access Control Vulnerability
Critical
CVE-2006-0218
MyBB Vulnerability
Critical
CVE-2011-5133
MyBB Vulnerability
Critical
CVE-2020-22612
MyBB Vulnerability
Critical
CVE-2016-9402
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2016-9416
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2016-9420
MyBB Improper Input Validation Vulnerability
Critical
CVE-2015-2786
MyBB Vulnerability
Critical
CVE-2015-8974
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2007-1963
MyBB Other Vulnerability
High
CVE-2016-9418
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2016-9415
MyBB Improper Access Control Vulnerability
High
CVE-2015-8977
MyBB Insertion of Sensitive Information into Log File Vulnerability
High
CVE-2007-2212
MyBB Other Vulnerability
High
CVE-2008-0383
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2015-8973
MyBB Improper Access Control Vulnerability
High
CVE-2021-27947
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2015-2352
MyBB Vulnerability
High
CVE-2008-3071
MyBB Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2008-3070
MyBB Vulnerability
High
CVE-2008-3965
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2014-9240
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2008-3967
MyBB Permissions Privileges and Access Controls Vulnerability
High
CVE-2012-5909
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2010-5096
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2012-2325
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2021-27948
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2012-2324
MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High