MyBB 1.4.5 Multiple Security Vulnerabilities

Bugtraq ID:	34798
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2009 12:00AM
Updated:	May 05 2009 08:36PM
Credit:	Jacques Copeau
Vulnerable:	MyBB MyBB 1.4.5
Not Vulnerable:	MyBB MyBB 1.4.6

MyBB 1.4.5 Multiple Security Vulnerabilities

MyBB is prone to multiple security vulnerabilities, including an HTML-injection issue and an unspecified issue.

An attacker may leverage the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, and to launch other attacks.

MyBB 1.4.5 is vulnerable; other versions may also be affected.

MyBB 1.4.5 Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example input to the avatar URL field is available:

http://www.example.com/somefile.png?"><script>alert('xss')</script>

MyBB 1.4.5 Multiple Security Vulnerabilities

Solution:
The vendor has released an update. Please see the references for details.

MyBB 1.4.5 Multiple Security Vulnerabilities

References:

• MyBulletinBoard Homepage (MyBulletinBoard)
  
• 'Cross-Site Scripting' vulnerability in MyBB 1.4.5 (Jacques Copeau )
  
• MyBB 1.4.6 Released - Security Update (MyBB)