MyBB Multiple Security Vulnerabilities

Bugtraq ID:	47131
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 04 2011 12:00AM
Updated:	Apr 04 2011 12:00AM
Credit:	MustLive
Vulnerable:	MyBB MyBB 1.6.1 MyBB MyBB 1.4.14 MyBB MyBB 1.4.9 MyBB MyBB 1.4.8 MyBB MyBB 1.4.7 MyBB MyBB 1.6
Not Vulnerable:	MyBB MyBB 1.6.2 MyBB MyBB 1.4.15

MyBB Multiple Security Vulnerabilities

MyBB is prone to multiple security vulnerabilities. These vulnerabilities include a username-enumeration weakness, an XML-injection vulnerability, and a cross-site scripting vulnerability.

Exploiting these issues may allow attackers to discern valid usernames, which may aid them in brute-force password cracking or other attacks. Attacker-supplied XML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user.

Versions prior to 1.6.2 and 1.4.15 are vulnerable.

MyBB Multiple Security Vulnerabilities

Attackers can exploit these issues through a browser. To exploit the cross-site scripting issue, the attacker must entice an unsuspecting user to follow a malicious URI.

The following example URIs are available:

XML-injection:
http://www.example.com/xmlhttp.php?action=username_exists&value=%3Cxml/%3E

XSS:
http://www.example.com/xmlhttp.php?action=username_exists&value=%3Cdiv%20xmlns=%22http://www.w3.org/1999/xhtml%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E%3C/div%3E

MyBB Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

MyBB Multiple Security Vulnerabilities

References:

• MyBB 1.6.2 and 1.4.15 �?? Security Update (MyBB)
  
• MyBB Homepage (MyBB)