MEDIUM
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup
Published Jan 8, 2014
4.3
MEDIUMCVSS 2.0
EPSS 1.88%
Description
Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup.
Affected products
No data.
OR
- ≤ 1.6.11
- 1.00
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.01
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.3
- 1.1.4
- 1.1.5
- 1.1.6
- 1.1.7
- 1.1.8
- 1.02
- 1.2
- 1.2.0
- 1.2.1
- 1.2.2
- 1.2.3
- 1.2.4
- 1.2.5
- 1.2.6
- 1.2.7
- 1.2.8
- 1.2.9
- 1.2.10
- 1.2.11
- 1.2.12
- 1.2.13
- 1.2.14
- 1.03
- 1.3
- 1.04
- 1.4.0
- 1.4.1
- 1.4.2
- 1.4.3
- 1.4.4
- 1.4.5
- 1.4.6
- 1.4.7
- 1.4.8
- 1.4.9
- 1.4.10
- 1.4.11
- 1.4.12
- 1.4.13
- 1.4.14
- 1.4.15
- 1.4.16
- 1.5.1
- 1.5.2
- 1.6.0
- 1.6.1
- 1.6.2
- 1.6.3
- 1.6.4
- 1.6.5
- 1.6.6
- 1.6.7
- 1.6.8
- 1.6.9
- 1.6.10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release x_refsource_CONFIRMVendor Advisory
- http://osvdb.org/101545 vdb-entryx_refsource_OSVDB
- http://secunia.com/advisories/55945 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://www.securityfocus.com/bid/64570 vdb-entryx_refsource_BID
- https://github.com/mybb/mybb/commit/6212bc954d72caf591e141ca36b8df964387bee8 x_refsource_CONFIRMExploitPatch
| Link | Providers | Tags |
|---|---|---|
| http://blog.mybb.com/2013/12/16/mybb-1-6-12-released-security-maintenance-release | x_refsource_CONFIRMVendor Advisory | |
| http://osvdb.org/101545 | vdb-entryx_refsource_OSVDB | |
| http://secunia.com/advisories/55945 | third-party-advisoryx_refsource_SECUNIAVendor Advisory | |
| http://www.securityfocus.com/bid/64570 | vdb-entryx_refsource_BID | |
| https://github.com/mybb/mybb/commit/6212bc954d72caf591e141ca36b8df964387bee8 | x_refsource_CONFIRMExploitPatch |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 8, 2014
Updated Sep 16, 2024
Reserved Jan 8, 2014
Link CVE-2013-7275
CISA Vulnrichment
Updated n/a