MEDIUM
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment
Published Aug 13, 2012
4.3
MEDIUMCVSS 2.0
EPSS 0.99%
Description
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Affected products
No data.
OR
- ≤ 1.6.6
- 1.00
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.01
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.1.4
- 1.1.5
- 1.1.6
- 1.1.7
- 1.1.8
- 1.02
- 1.2.0
- 1.2.1
- 1.2.2
- 1.2.3
- 1.2.4
- 1.2.5
- 1.2.6
- 1.2.7
- 1.2.8
- 1.2.9
- 1.2.10
- 1.2.11
- 1.2.12
- 1.2.13
- 1.2.14
- 1.03
- 1.3
- 1.04
- 1.4.0
- 1.4.1
- 1.4.2
- 1.4.3
- 1.4.4
- 1.4.5
- 1.4.6
- 1.4.7
- 1.4.8
- 1.4.9
- 1.4.10
- 1.4.11
- 1.4.12
- 1.4.13
- 1.4.14
- 1.4.15
- 1.4.16
- 1.5.1
- 1.5.2
- 1.6.1
- 1.6.2
- 1.6.3
- 1.6.4
- 1.6.5
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/ x_refsource_CONFIRMPatchVendor Advisory
- http://www.openwall.com/lists/oss-security/2012/05/07/13 mailing-listx_refsource_MLIST
- http://www.openwall.com/lists/oss-security/2012/05/07/14 mailing-listx_refsource_MLIST
- http://www.securityfocus.com/bid/53417 vdb-entryx_refsource_BID
| Link | Providers | Tags |
|---|---|---|
| http://blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/ | x_refsource_CONFIRMPatchVendor Advisory | |
| http://www.openwall.com/lists/oss-security/2012/05/07/13 | mailing-listx_refsource_MLIST | |
| http://www.openwall.com/lists/oss-security/2012/05/07/14 | mailing-listx_refsource_MLIST | |
| http://www.securityfocus.com/bid/53417 | vdb-entryx_refsource_BID |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Aug 13, 2012
Updated Sep 16, 2024
Reserved Apr 19, 2012
Link CVE-2012-2326
CISA Vulnrichment
Updated n/a