MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-4625 - Vulnerability Database

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2010-4625

Medium

Reference: CVE-2010-4625

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-4625

Title: MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.