Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: MyBB (formerly MyBulletinBoard) 1.x
This vulnerability report for MyBB (formerly MyBulletinBoard) 1.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in MyBB (formerly MyBulletinBoard) 1.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor N/A

Product Link View Here (Link to external site)

Affected By 44 Secunia advisories
124 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 0% (0 of 44 Secunia advisories)

Most Critical Unpatched
There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..




24 Secunia Advisories in 2006
Secunia has issued a total of 24 Secunia advisories in 2006 for MyBB (formerly MyBulletinBoard) 1.x. Currently, 0% (0 out of 24) are marked as unpatched.

More information about the specific Secunia advisories affecting MyBB (formerly MyBulletinBoard) 1.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



MyBB Cross-Site Scripting Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 24 in 2006. 10,076 views.
Release Date:
2006-09-18
Secunia Advisory ID:
SA21972
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
HACKERS PAL has discovered some vulnerabilities in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB Cross-Site Scripting and Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 24 in 2006. 9,388 views.
Release Date:
2006-08-31
Secunia Advisory ID:
SA21697
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
imei addmimistrator has reported two vulnerabilities in MyBB, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks. [Read More]


MyBB Avatar / Attachment Script Insertion Vulnerability
Vendor Patch. Secunia Advisory 3 of 24 in 2006. 10,603 views.
Release Date:
2006-08-28
Secunia Advisory ID:
SA21645
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Redworm has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct script insertion attacks. [Read More]


MyBB "avatarurl" Script Insertion Vulnerability
Vendor Patch. Secunia Advisory 4 of 24 in 2006. 6,936 views.
Release Date:
2006-07-24
Secunia Advisory ID:
SA21181
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Aliaksandr Hartsuyeu has discovered a vulnerability in MyBB, which can be exploited by malicious users to conduct script insertion attacks. [Read More]


MyBB "CLIENT-IP" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 5 of 24 in 2006. 7,674 views.
Release Date:
2006-07-17
Secunia Advisory ID:
SA21070
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
rgod has reported a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 6 of 24 in 2006. 8,546 views.
Release Date:
2006-06-29
Secunia Advisory ID:
SA20873
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and manipulate certain information. [Read More]


MyBB editpost.php Cross-Site Request Forgery
Vendor Patch. Secunia Advisory 7 of 24 in 2006. 7,325 views.
Release Date:
2006-06-29
Secunia Advisory ID:
SA20659
Solution Status:
Vendor Patch
Criticality:
Impact:
Hijacking
Where:
From remote
Short Description:
Bartek Ryniec has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]


MyBB "showcodebuttons" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 8 of 24 in 2006. 6,703 views.
Release Date:
2006-06-26
Secunia Advisory ID:
SA20795
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Manipulation of data
Where:
From remote
Short Description:
imei addmimistrator has reported a vulnerability in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


MyBB "domecode()" PHP Code Execution Vulnerability
Vendor Patch. Secunia Advisory 9 of 24 in 2006. 7,021 views.
Release Date:
2006-06-12
Secunia Advisory ID:
SA20371
Solution Status:
Vendor Patch
Criticality:
Impact:
System access
Where:
From remote
Short Description:
Secunia Research has discovered a vulnerability in MyBB, which can be exploited by malicious people to compromise a vulnerable system. [Read More]


MyBB "do" Parameter Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 10 of 24 in 2006. 5,904 views.
Release Date:
2006-06-08
Secunia Advisory ID:
SA20492
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
o.y.6 has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB Multiple SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 11 of 24 in 2006. 7,590 views.
Release Date:
2006-04-28
Secunia Advisory ID:
SA19865
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


MyBB Cross-Site Scripting and Variable Manipulation Vulnerabilities
Vendor Patch. Secunia Advisory 12 of 24 in 2006. 7,026 views.
Release Date:
2006-04-18
Secunia Advisory ID:
SA19668
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Two vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and manipulate certain information. [Read More]


MyBB Cross-Site Scripting and Script Insertion
Vendor Patch. Secunia Advisory 13 of 24 in 2006. 6,802 views.
Release Date:
2006-04-04
Secunia Advisory ID:
SA19516
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks. [Read More]


MyBB "url" Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 14 of 24 in 2006. 7,431 views.
Release Date:
2006-03-16
Secunia Advisory ID:
SA19213
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
imei addmimistrator has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB SQL Injection and Script Insertion Vulnerabilities
Vendor Patch. Secunia Advisory 15 of 24 in 2006. 9,139 views.
Release Date:
2006-03-01
Secunia Advisory ID:
SA19061
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Cross Site Scripting
Where:
From remote
Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct script insertion and SQL injection attacks. [Read More]


MyBB Advanced Details Link Cross-Site Scripting
Vendor Patch. Secunia Advisory 16 of 24 in 2006. 8,250 views.
Release Date:
2006-02-17
Secunia Advisory ID:
SA18866
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
HACKERS PAL has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB Cross-Site Scripting and Multiple SQL Injection Vulnerabilities
Vendor Patch. Secunia Advisory 17 of 24 in 2006. 7,620 views.
Release Date:
2006-02-16
Secunia Advisory ID:
SA18897
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Some vulnerabilities have been reported in MyBB, which can be exploited by malicious users and by malicious people to conduct SQL injection attacks, or by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB "posts" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 18 of 24 in 2006. 7,683 views.
Release Date:
2006-02-08
Secunia Advisory ID:
SA18754
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
imei addmimistrator has discovered a vulnerability in MyBB, which can be exploited by malicious users to conduct SQL injection attacks. [Read More]


MyBB "templatelist" SQL Injection Vulnerability
Vendor Patch. Secunia Advisory 19 of 24 in 2006. 7,292 views.
Release Date:
2006-02-01
Secunia Advisory ID:
SA18678
Solution Status:
Vendor Patch
Criticality:
Impact:
Manipulation of data
Where:
From remote
Short Description:
A vulnerability has been discovered in MyBB, which can be exploited by malicious people to conduct SQL injection attacks. [Read More]


MyBB Cross-Site Scripting Vulnerabilities
Vendor Patch. Secunia Advisory 20 of 24 in 2006. 8,090 views.
Release Date:
2006-01-27
Secunia Advisory ID:
SA18617
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Exposure of sensitive information
Where:
From remote
Short Description:
Some vulnerabilities have been discovered in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


MyBB User Control Panel Cross-Site Request Forgery
Vendor Patch. Secunia Advisory 21 of 24 in 2006. 7,215 views.
Release Date:
2006-01-25
Secunia Advisory ID:
SA18603
Solution Status:
Vendor Patch
Criticality:
Impact:
Hijacking
Where:
From remote
Short Description:
Roozbeh Afrasiabi has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]


MyBB Disclosure of Table Prefix Weakness
Vendor Patch. Secunia Advisory 22 of 24 in 2006. 7,676 views.
Release Date:
2006-01-23
Secunia Advisory ID:
SA18577
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of system information
Where:
From remote
Short Description:
imei has discovered a weakness in MyBB, which can be exploited by malicious people to disclose system information. [Read More]


MyBB "Allow HTML in Signatures" Script Insertion Security Issue
Vendor Patch. Secunia Advisory 23 of 24 in 2006. 7,120 views.
Release Date:
2006-01-19
Secunia Advisory ID:
SA18544
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
Night_Warrior has discovered a security issue in MyBB, which can be exploited by malicious people to conduct script insertion attacks. [Read More]


MyBB Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 24 of 24 in 2006. 7,467 views.
Release Date:
2006-01-02
Secunia Advisory ID:
SA18281
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Cross Site Scripting
Manipulation of data
Where:
From remote
Short Description:
Some vulnerabilities have been reported in MyBB, where some have unknown impacts and others can be exploited by malicious people to conduct script insertion and SQL injection attacks. [Read More]