CVE-2023-41362

概要

参考情報

• blog.sorcery.ie/posts/mybb_acp_rce
• mybb/mybb commit a43a6f2 · Patch
• mybb/mybb security advisory · Patch
• mybb.com/versions/1.8.36 · Release Notes

mybb のその他の脆弱性

• CVE-2023-53979高 8.8MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass avatar upload restrictions and execute arbit…
• CVE-2023-53978中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum announcement system that allows authenticated administr…
• CVE-2023-53977中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the forum management system that allows authenticated administrat…
• CVE-2023-53976中 5.4myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management system that allows authenticated administ…
• CVE-2011-10018緊急 9.8myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execu…