CVE-2014-9240

概要

参考情報

• blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release · Patch
• packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html · Exploit

mybb のその他の脆弱性

• CVE-2023-53979高 8.8MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbit…
• CVE-2023-53978中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administr…
• CVE-2023-53977中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrat…
• CVE-2023-53976中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administ…
• CVE-2011-10018緊急 9.8myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execu…