CVEvulnerability
CVE-2015-2334
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• mybb mybb (<= 1.8.3)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73214 www.securityfocus.com
- http://www.securitytracker.com/id/1031953 www.securitytracker.com
- http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73214 www.securityfocus.com
- http://www.securitytracker.com/id/1031953 www.securitytracker.com