Multiple vulnerabilities in MyBB

Beschreibung

Multiple serious vulnerabilities have been found in MyBB. Malicious users can exploit these vulnerabilities to obtain sensitive information or conduct cross site scrtipting.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited remotely via vectors related to JSON;
2. CSRF vulnerability can be exploited remotely via unknown vectors;
3. XSS vulnerability can be exploited remotely via vectors related to administrative backend;

Ursprüngliche Informationshinweise

• MyBB DevBlog

CVE Liste

• CVE-2015-2334
  high
• CVE-2015-2335
  high
• CVE-2015-2332
  high
• CVE-2015-2333
  high
• CVE-2015-2149
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com