Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MyBB Improper Privilege Management Vulnerability - CVE-2018-1000503 - Vulnerability Database
MyBB

MyBB Improper Privilege Management Vulnerability - CVE-2018-1000503

Medium
Reference: CVE-2018-1000503
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1000503
Title: MyBB Improper Privilege Management Vulnerability
Overview:

MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in 1.8.15.