Forum

MyBB

MyBB is a free bulletin board system software package developed by the MyBB Group. A lot of thought has gone into the MyBB interface to make it easy to use. MyBB uses a standard discussion board structure so your visitors will feel familiar with the way MyBB works. Your visitors can use the MyBB user control panel to change the way they view discussions.

Official Site:

https://mybb.com/

Severity Summary:

Critical: 11 High: 33 Medium: 75 Low: 2

Reference

Title

Severity

CVE-2016-9410

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

High

CVE-2016-9417

MyBB Server-Side Request Forgery (SSRF) Vulnerability

High

CVE-2018-1000502

MyBB Inclusion of Functionality from Untrusted Control Sphere Vulnerability

High

CVE-2021-27946

MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

CVE-2022-39265

MyBB Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability

High

CVE-2022-24734

MyBB Improper Control of Generation of Code (Code Injection) Vulnerability

High

CVE-2021-43281

MyBB Improper Control of Generation of Code (Code Injection) Vulnerability

High

CVE-2023-41362

MyBB Improper Control of Generation of Code (Code Injection) Vulnerability

High

CVE-2017-7566

MyBB Server-Side Request Forgery (SSRF) Vulnerability

High

CVE-2022-45867

MyBB Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

High

CVE-2019-12830

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

High

CVE-2016-9414

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

High

CVE-2021-27890

MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

CVE-2019-12831

MyBB Improper Input Validation Vulnerability

High

CVE-2010-4522

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-46251

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-43707

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2010-4625

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2008-4929

MyBB Cryptographic Issues Vulnerability

Medium

CVE-2008-4928

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2010-4626

MyBB Cryptographic Issues Vulnerability

Medium

CVE-2010-4627

MyBB Cross-Site Request Forgery (CSRF) Vulnerability

Medium

CVE-2023-28467

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2008-3966

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2008-4930

MyBB Improper Input Validation Vulnerability

Medium

CVE-2008-0788

MyBB Cross-Site Request Forgery (CSRF) Vulnerability

Medium

CVE-2008-3334

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2008-3069

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-43708

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-43709

MyBB Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Medium