CVE-2021-27890

概要

参考情報

• packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html · Third Party Advisory
• blog.sonarsource.com/mybb-remote-code-execution-chain · Exploit
• mybb/mybb security advisory · Patch

mybb のその他の脆弱性

• CVE-2023-53979高 8.8MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbit…
• CVE-2023-53978中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administr…
• CVE-2023-53977中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrat…
• CVE-2023-53976中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administ…
• CVE-2011-10018緊急 9.8myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execu…