MyBB CVE-2018-1000503 Information Disclosure Vulnerability
BID:104568
Info
MyBB CVE-2018-1000503 Information Disclosure Vulnerability
| Bugtraq ID: | 104568 |
| Class: | Design Error |
| CVE: |
CVE-2018-1000503 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 15 2018 12:00AM |
| Updated: | Mar 15 2018 12:00AM |
| Credit: | Riley Baird |
| Vulnerable: |
MyBB MyBB 1.8.14 MyBB MyBB 1.8.11 MyBB MyBB 1.8.8 MyBB MyBB 1.8.7 MyBB MyBB 1.8.6 MyBB MyBB 1.8.5 MyBB MyBB 1.8.4 MyBB MyBB 1.8.3 MyBB MyBB 1.8.2 MyBB MyBB 1.8.1 MyBB MyBB 1.6.16 MyBB MyBB 1.6.14 MyBB MyBB 1.6.13 MyBB MyBB 1.6.11 MyBB MyBB 1.6.10 MyBB MyBB 1.6.9 MyBB MyBB 1.6.8 MyBB MyBB 1.6.7 MyBB MyBB 1.6.6 MyBB MyBB 1.6.5 MyBB MyBB 1.6.4 MyBB MyBB 1.6.3 MyBB MyBB 1.6.2 MyBB MyBB 1.6.1 MyBB MyBB 1.4.16 MyBB MyBB 1.4.15 MyBB MyBB 1.4.14 MyBB MyBB 1.4.10 MyBB MyBB 1.4.9 MyBB MyBB 1.4.8 MyBB MyBB 1.4.7 MyBB MyBB 1.4.6 MyBB MyBB 1.4.5 MyBB MyBB 1.4.3 MyBB MyBB 1.4.2 MyBB MyBB 1.2.14 MyBB MyBB 1.2.12 MyBB MyBB 1.2.2 MyBB MyBB 1.2.1 MyBB MyBB 1.2 MyBB MyBB 1.1.3 MyBB MyBB 1.1 MyBB MyBB 1.6.12 MyBB MyBB 1.6.0 MyBB MyBB 1.6 MyBB MyBB 1.5.2 MyBB MyBB 1.5.1 MyBB MyBB 1.4.4 MyBB MyBB 1.4.13 MyBB MyBB 1.4.12 MyBB MyBB 1.4.11 MyBB MyBB 1.4.1 MyBB MyBB 1.4.0 MyBB MyBB 1.2.9 MyBB MyBB 1.2.8 MyBB MyBB 1.2.7 MyBB MyBB 1.2.6 MyBB MyBB 1.2.5 MyBB MyBB 1.2.4 MyBB MyBB 1.2.3 MyBB MyBB 1.2.13 MyBB MyBB 1.2.11 MyBB MyBB 1.2.10 MyBB MyBB 1.1.8 MyBB MyBB 1.1.7 MyBB MyBB 1.1.6 MyBB MyBB 1.1.5 MyBB MyBB 1.1.4 MyBB MyBB 1.1.2 MyBB MyBB 1.1.1 MyBB MyBB 1.04 MyBB MyBB 1.03 MyBB MyBB 1.02 MyBB MyBB 1.01 MyBB MyBB 1.00 |
| Not Vulnerable: |
MyBB MyBB 1.8.15 |
Exploit / POC
MyBB CVE-2018-1000503 Information Disclosure Vulnerability
The following example URI is available:
http://www.example.com/usercp2.php?action=addsubscription&type=forum&fid=<forum id>&my_post_key=<your post key>
The following example URI is available:
http://www.example.com/usercp2.php?action=addsubscription&type=forum&fid=<forum id>&my_post_key=<your post key>