Multiple vulnerabilities in MyBB

Описание

Multiple serious vulnerabilities have been found in MyBB. Malicious users can exploit these vulnerabilities to obtain sensitive information or conduct cross site scrtipting.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited remotely via vectors related to JSON;
2. CSRF vulnerability can be exploited remotely via unknown vectors;
3. XSS vulnerability can be exploited remotely via vectors related to administrative backend;

Первичный источник обнаружения

• MyBB DevBlog
  

Связанные продукты

• MyBB

Список CVE

• CVE-2015-2334
  high
• CVE-2015-2335
  critical
• CVE-2015-2332
  warning
• CVE-2015-2333
  warning
• CVE-2015-2149
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com