MyBB (formerly MyBulletinBoard) 1.x

Blog

Vulnerability Report: MyBB (formerly MyBulletinBoard) 1.x

This vulnerability report for MyBB (formerly MyBulletinBoard) 1.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in MyBB (formerly MyBulletinBoard) 1.x then you are more than welcome to contact us.

1. Product Summary Only

2. Secunia Advisory Statistics (All time)

2.1. Statistics for 2013

2.2. Statistics for 2012

2.3. Statistics for 2011

2.4. Statistics for 2010

2.5. Statistics for 2009

2.6. Statistics for 2008

2.7. Statistics for 2007

2.8. Statistics for 2006

2.9. Statistics for 2005

2.10. Statistics for 2004

2.11. Statistics for 2003

3. List of Secunia Advisories (All time)

3.1. List for 2013

3.2. List for 2012

3.3. List for 2011

3.4. List for 2010

3.5. List for 2009

3.6. List for 2008

3.7. List for 2007

3.8. List for 2006

3.9. List for 2005

3.10. List for 2004

3.11. List for 2003

4. Send Feedback

Vendor, Links, and Unpatched Vulnerabilities

Vendor	MyBB

Product Link	View Here (Link to external site)

Affected By	55 Secunia advisories 156 Vulnerabilities

Monitor Product	Receive alerts for this product

Unpatched	0% (0 of 55 Secunia advisories)

Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..

55 Secunia Advisories in 2003-2013

Secunia has issued a total of 55 Secunia advisories in 2003-2013 for MyBB (formerly MyBulletinBoard) 1.x. Currently, 0% (0 out of 55) are marked as unpatched.

More information about the specific Secunia advisories affecting MyBB (formerly MyBulletinBoard) 1.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 1 in 2013. 654 views.

Release Date:
2013-04-23

Secunia Advisory ID:
SA52828

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown
Security Bypass
Cross Site Scripting

Where:
From remote

Short Description:
A security issue and three vulnerabilities have been reported in MyBB, where two have an unknown impact and others can be exploited by malicious users to bypass certain security restrictions and by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB "posthash" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 2 in 2012. 805 views.

Release Date:
2012-12-17

Secunia Advisory ID:
SA51592

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
A vulnerability has been reported in MyBB, which can be exploited by malicious users to conduct SQL injection attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 2 in 2012. 1,308 views.

Release Date:
2012-02-10

Secunia Advisory ID:
SA47882

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Multiple vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 4 in 2011. 1,157 views.

Release Date:
2011-11-25

Secunia Advisory ID:
SA46951

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, where one has an unknown impact and others can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks. [Read More]

MyBB Compromised Source Packages Backdoor Security Issue
Vendor Patch. Secunia Advisory 2 of 4 in 2011. 1,624 views.

Release Date:
2011-10-06

Secunia Advisory ID:
SA46300

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
A security issue has been reported in MyBB, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

MyBB Information Disclosure and SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 3 of 4 in 2011. 1,683 views.

Release Date:
2011-04-18

Secunia Advisory ID:
SA44219

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information

Where:
From remote

Short Description:
A security issue and a vulnerability have been discovered in MyBB, which can be exploited by malicious people to disclose certain sensitive information and conduct SQL injection attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 4 in 2011. 1,203 views.

Release Date:
2011-04-05

Secunia Advisory ID:
SA43937

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Exposure of system information

Where:
From remote

Short Description:
Two weaknesses and two vulnerabilities have been reported in MyBB, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to enumerate usernames and conduct cross-site scripting attacks. [Read More]

MyBB Multiple Cross-Site Scripting Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 3 in 2010. 1,497 views.

Release Date:
2010-12-20

Secunia Advisory ID:
SA42698

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 3 in 2010. 2,167 views.

Release Date:
2010-04-13

Secunia Advisory ID:
SA39378

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks and bypass certain security restrictions. [Read More]

MyBB Template Parser PHP Code Execution Vulnerability
Vendor Patch. Secunia Advisory 3 of 3 in 2010. 3,446 views.

Release Date:
2010-03-16

Secunia Advisory ID:
SA38941

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
System access

Where:
From remote

Short Description:
A vulnerability has been discovered in MyBB, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

MyBB Avatar Change File Enumeration Security Issue
Vendor Patch. Secunia Advisory 1 of 5 in 2009. 2,408 views.

Release Date:
2009-12-28

Secunia Advisory ID:
SA37906

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information

Where:
From remote

Short Description:
Stefano Angaran has discovered a security issue in MyBB, which can be exploited by malicious users to enumerate files on an affected system. [Read More]

MyBB Username Spoofing and SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 5 in 2009. 3,098 views.

Release Date:
2009-09-21

Secunia Advisory ID:
SA36803

Solution Status:
Vendor Patch

Criticality:

Impact:
Spoofing
Manipulation of data

Where:
From remote

Short Description:
A security issue and a vulnerability have been reported in MyBB, which can be exploited by malicious users to conduct spoofing and SQL injection attacks. [Read More]

MyBB Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 3 of 5 in 2009. 2,225 views.

Release Date:
2009-06-26

Secunia Advisory ID:
SA35574

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious users to conduct script insertion attacks. [Read More]

MyBB "birthdayprivacy" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 4 of 5 in 2009. 3,053 views.

Release Date:
2009-06-23

Secunia Advisory ID:
SA35517

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
A vulnerability has been reported in MyBB, which can be exploited by malicious users to conduct SQL injection attacks. [Read More]

MyBB Script Insertion and Cross-Site Scripting
Vendor Patch. Secunia Advisory 5 of 5 in 2009. 2,088 views.

Release Date:
2009-05-04

Secunia Advisory ID:
SA34979

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Two vulnerabilities have been reported in MyBB, which can be exploited by malicious users to conduct cross-site scripting and script insertion attacks. [Read More]

MyBB "Referer" Header "my_post_key" Token Disclosure
Vendor Patch. Secunia Advisory 1 of 8 in 2008. 5,386 views.

Release Date:
2008-11-26

Secunia Advisory ID:
SA32880

Solution Status:
Vendor Patch

Criticality:

Impact:
Hijacking
Cross Site Scripting
Exposure of sensitive information

Where:
From remote

Short Description:
NBBN has discovered some vulnerabilities in MyBB, which can be exploited can be exploited by malicious people to disclose sensitive information. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 8 in 2008. 3,809 views.

Release Date:
2008-10-30

Secunia Advisory ID:
SA32451

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown
Cross Site Scripting
Brute force
Exposure of sensitive information

Where:
From remote

Short Description:
Some vulnerabilities and a weakness have been reported in MyBB, where some have an unknown impact, and others can be exploited by malicious people to conduct brute force or cross-site scripting attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 3 of 8 in 2008. 3,488 views.

Release Date:
2008-09-22

Secunia Advisory ID:
SA31927

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Unknown

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, where some have unknown impact and others can be exploited to conduct cross-site scripting attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 8 in 2008. 3,629 views.

Release Date:
2008-09-10

Secunia Advisory ID:
SA31760

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown

Where:
From remote

Short Description:
Some vulnerabilities with unknown impacts have been reported in MyBB. [Read More]

MyBB "search.php" Cross-Site Scripting
Vendor Patch. Secunia Advisory 5 of 8 in 2008. 5,151 views.

Release Date:
2008-07-28

Secunia Advisory ID:
SA31216

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 6 of 8 in 2008. 5,804 views.

Release Date:
2008-07-17

Secunia Advisory ID:
SA31013

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown

Where:
From remote

Short Description:
Some vulnerabilities with unknown impacts have been reported in MyBB. [Read More]

MyBB SQL Injection and Cross-Site Request Forgery Vulnerabilities
Vendor Patch. Secunia Advisory 7 of 8 in 2008. 8,314 views.

Release Date:
2008-01-21

Secunia Advisory ID:
SA28572

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious users to conduct SQL injection or cross-site request forgery attacks. [Read More]

MyBB PHP Code Execution and SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 8 of 8 in 2008. 10,028 views.

Release Date:
2008-01-17

Secunia Advisory ID:
SA28509

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information
System access

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious users to conduct SQL injection attacks, and by malicious people to compromise a vulnerable system. [Read More]

MyBB "day" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 1 of 3 in 2007. 10,642 views.

Release Date:
2007-04-24

Secunia Advisory ID:
SA24967

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information

Where:
From remote

Short Description:
0x86 has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBB "Client-IP" SQL Injection and Code Execution
Vendor Patch. Secunia Advisory 2 of 3 in 2007. 9,182 views.

Release Date:
2007-04-04

Secunia Advisory ID:
SA24689

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information
System access

Where:
From remote

Short Description:
DarkFig has reported a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system. [Read More]

MyBB private.php Cross-Site Request Forgery and Cross-Site Scripting
Vendor Patch. Secunia Advisory 3 of 3 in 2007. 13,258 views.

Release Date:
2007-01-25

Secunia Advisory ID:
SA23934

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks and cross-site scripting attacks. [Read More]

MyBB Cross-Site Scripting Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 24 in 2006. 13,147 views.

Release Date:
2006-09-18

Secunia Advisory ID:
SA21972

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
HACKERS PAL has discovered some vulnerabilities in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB Cross-Site Scripting and Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 24 in 2006. 11,808 views.

Release Date:
2006-08-31

Secunia Advisory ID:
SA21697

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
imei addmimistrator has reported two vulnerabilities in MyBB, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks. [Read More]

MyBB Avatar / Attachment Script Insertion Vulnerability
Vendor Patch. Secunia Advisory 3 of 24 in 2006. 13,500 views.

Release Date:
2006-08-28

Secunia Advisory ID:
SA21645

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Redworm has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct script insertion attacks. [Read More]

MyBB "avatarurl" Script Insertion Vulnerability
Vendor Patch. Secunia Advisory 4 of 24 in 2006. 9,110 views.

Release Date:
2006-07-24

Secunia Advisory ID:
SA21181

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Aliaksandr Hartsuyeu has discovered a vulnerability in MyBB, which can be exploited by malicious users to conduct script insertion attacks. [Read More]

MyBB "CLIENT-IP" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 5 of 24 in 2006. 10,219 views.

Release Date:
2006-07-17

Secunia Advisory ID:
SA21070

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
rgod has reported a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 6 of 24 in 2006. 11,719 views.

Release Date:
2006-06-29

Secunia Advisory ID:
SA20873

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and manipulate certain information. [Read More]

MyBB editpost.php Cross-Site Request Forgery
Vendor Patch. Secunia Advisory 7 of 24 in 2006. 9,834 views.

Release Date:
2006-06-29

Secunia Advisory ID:
SA20659

Solution Status:
Vendor Patch

Criticality:

Impact:
Hijacking

Where:
From remote

Short Description:
Bartek Ryniec has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]

MyBB "showcodebuttons" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 8 of 24 in 2006. 9,450 views.

Release Date:
2006-06-26

Secunia Advisory ID:
SA20795

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Manipulation of data

Where:
From remote

Short Description:
imei addmimistrator has reported a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBB "domecode()" PHP Code Execution Vulnerability
Vendor Patch. Secunia Advisory 9 of 24 in 2006. 9,964 views.

Release Date:
2006-06-12

Secunia Advisory ID:
SA20371

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
Secunia Research has discovered a vulnerability in MyBB, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

MyBB "do" Parameter Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 10 of 24 in 2006. 8,049 views.

Release Date:
2006-06-08

Secunia Advisory ID:
SA20492

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
o.y.6 has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB Multiple SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 11 of 24 in 2006. 9,747 views.

Release Date:
2006-04-28

Secunia Advisory ID:
SA19865

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBB Cross-Site Scripting and Variable Manipulation Vulnerabilities
Vendor Patch. Secunia Advisory 12 of 24 in 2006. 9,066 views.

Release Date:
2006-04-18

Secunia Advisory ID:
SA19668

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Two vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and manipulate certain information. [Read More]

MyBB Cross-Site Scripting and Script Insertion
Vendor Patch. Secunia Advisory 13 of 24 in 2006. 8,392 views.

Release Date:
2006-04-04

Secunia Advisory ID:
SA19516

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks. [Read More]

MyBB "url" Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 14 of 24 in 2006. 9,067 views.

Release Date:
2006-03-16

Secunia Advisory ID:
SA19213

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
imei addmimistrator has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB SQL Injection and Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 15 of 24 in 2006. 11,968 views.

Release Date:
2006-03-01

Secunia Advisory ID:
SA19061

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Cross Site Scripting

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct script insertion and SQL injection attacks. [Read More]

MyBB Advanced Details Link Cross-Site Scripting
Vendor Patch. Secunia Advisory 16 of 24 in 2006. 10,415 views.

Release Date:
2006-02-17

Secunia Advisory ID:
SA18866

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
HACKERS PAL has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB Cross-Site Scripting and Multiple SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 17 of 24 in 2006. 9,854 views.

Release Date:
2006-02-16

Secunia Advisory ID:
SA18897

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious users and by malicious people to conduct SQL injection attacks, or by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB "posts" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 18 of 24 in 2006. 9,624 views.

Release Date:
2006-02-08

Secunia Advisory ID:
SA18754

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
imei addmimistrator has discovered a vulnerability in MyBB, which can be exploited by malicious users to conduct SQL injection attacks. [Read More]

MyBB "templatelist" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 19 of 24 in 2006. 9,014 views.

Release Date:
2006-02-01

Secunia Advisory ID:
SA18678

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
A vulnerability has been discovered in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBB Cross-Site Scripting Vulnerabilities
Vendor Patch. Secunia Advisory 20 of 24 in 2006. 10,043 views.

Release Date:
2006-01-27

Secunia Advisory ID:
SA18617

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Exposure of sensitive information

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

MyBB User Control Panel Cross-Site Request Forgery
Vendor Patch. Secunia Advisory 21 of 24 in 2006. 8,933 views.

Release Date:
2006-01-25

Secunia Advisory ID:
SA18603

Solution Status:
Vendor Patch

Criticality:

Impact:
Hijacking

Where:
From remote

Short Description:
Roozbeh Afrasiabi has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]

MyBB Disclosure of Table Prefix Weakness
Vendor Patch. Secunia Advisory 22 of 24 in 2006. 9,629 views.

Release Date:
2006-01-23

Secunia Advisory ID:
SA18577

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information

Where:
From remote

Short Description:
imei has discovered a weakness in MyBB, which can be exploited by malicious people to disclose system information. [Read More]

MyBB "Allow HTML in Signatures" Script Insertion Security Issue
Vendor Patch. Secunia Advisory 23 of 24 in 2006. 9,420 views.

Release Date:
2006-01-19

Secunia Advisory ID:
SA18544

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Night_Warrior has discovered a security issue in MyBB, which can be exploited by malicious people to conduct script insertion attacks. [Read More]

MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 24 of 24 in 2006. 9,725 views.

Release Date:
2006-01-02

Secunia Advisory ID:
SA18281

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, where some have unknown impacts and others can be exploited by malicious people to conduct script insertion and SQL injection attacks. [Read More]

MyBB SQL Injection and Unspecified Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 5 in 2005. 10,606 views.

Release Date:
2005-12-12

Secunia Advisory ID:
SA18000

Solution Status:
Vendor Patch

Criticality:

Impact:
Unknown
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been reported in MyBB, where some have unknown impacts and others can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBulletinBoard Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 5 in 2005. 8,550 views.

Release Date:
2005-11-15

Secunia Advisory ID:
SA17577

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Manipulation of data
DoS

Where:
From remote

Short Description:
syini666 has reported some vulnerabilities in MyBulletinBoard, which can be exploited by malicious people to cause a DoS (Denial of Service), manipulate certain information, and conduct script insertion attacks. [Read More]

MyBulletinBoard Multiple SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 3 of 5 in 2005. 8,173 views.

Release Date:
2005-09-08

Secunia Advisory ID:
SA16738

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBulletinBoard, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

MyBulletinBoard Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 5 in 2005. 12,281 views.

Release Date:
2005-05-31

Secunia Advisory ID:
SA15552

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting
Manipulation of data

Where:
From remote

Short Description:
Some vulnerabilities have been discovered in MyBulletinBoard (MyBB), which can be exploited by malicious people to conduct cross-site scripting, script insertion and SQL injection attacks. [Read More]

MyBulletinBoard "uid" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 5 of 5 in 2005. 12,876 views.

Release Date:
2005-01-05

Secunia Advisory ID:
SA13722

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
A vulnerability has been discovered in MyBulletinBoard, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]

Discuss this Product

A new thread in our forum is automatically created for each Product. Activate the thread by commenting/discussing below.

Subject: MyBB (formerly MyBulletinBoard) 1.x

No posts yet

Vulnerability Report: MyBB (formerly MyBulletinBoard) 1.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

55 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Vulnerability Report: MyBB (formerly MyBulletinBoard) 1.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

55 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?