CVE-2008-3966

MEDIO 4.3CVE-2008-3966 · Published 11/09/2008 · updated 16/06/2026

En resumen

CVE-2008-3966 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a mybb (mybb).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mybb mybb	`= 1.00= 1.01= 1.02= 1.03= 1.04= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2= 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.12= 1.2.13= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9≤ 1.4.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php.

References

Más vulnerabilidades de mybb

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mybb

= 1.00= 1.01= 1.02= 1.03= 1.04= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2= 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.12= 1.2.13= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9≤ 1.4.0

No fix yet

Description

Más vulnerabilidades de mybb

Ver todo →