MyBB 'member.php' Cross Site Scripting Vulnerability
BID:73212
Info
MyBB 'member.php' Cross Site Scripting Vulnerability
| Bugtraq ID: | 73212 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2332 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2015 12:00AM |
| Updated: | Feb 15 2015 12:00AM |
| Credit: | ATofighi |
| Vulnerable: |
MyBB MyBB 1.8.3 MyBB MyBB 1.8.2 MyBB MyBB 1.8.1 MyBB MyBB 1.6.16 MyBB MyBB 1.6.14 MyBB MyBB 1.6.13 MyBB MyBB 1.6.11 MyBB MyBB 1.6.10 MyBB MyBB 1.6.9 MyBB MyBB 1.6.8 MyBB MyBB 1.6.7 MyBB MyBB 1.6.6 MyBB MyBB 1.6.5 MyBB MyBB 1.6.4 MyBB MyBB 1.6.3 MyBB MyBB 1.6.2 MyBB MyBB 1.6.1 MyBB MyBB 1.4.16 MyBB MyBB 1.4.15 MyBB MyBB 1.4.14 MyBB MyBB 1.4.10 MyBB MyBB 1.4.9 MyBB MyBB 1.4.8 MyBB MyBB 1.4.7 MyBB MyBB 1.4.6 MyBB MyBB 1.4.5 MyBB MyBB 1.4.3 MyBB MyBB 1.4.2 MyBB MyBB 1.2.14 MyBB MyBB 1.2.12 MyBB MyBB 1.2.2 MyBB MyBB 1.2.1 MyBB MyBB 1.2 MyBB MyBB 1.1.3 MyBB MyBB 1.1 MyBB MyBB 1.6.12 MyBB MyBB 1.6.0 MyBB MyBB 1.6 MyBB MyBB 1.5.2 MyBB MyBB 1.5.1 MyBB MyBB 1.4.4 MyBB MyBB 1.4.13 MyBB MyBB 1.4.12 MyBB MyBB 1.4.11 MyBB MyBB 1.4.1 MyBB MyBB 1.4.0 MyBB MyBB 1.3 Pre-1.0 MyBB MyBB 1.2.9 MyBB MyBB 1.2.8 MyBB MyBB 1.2.7 MyBB MyBB 1.2.6 MyBB MyBB 1.2.5 MyBB MyBB 1.2.4 MyBB MyBB 1.2.3 MyBB MyBB 1.2.13 MyBB MyBB 1.2.11 MyBB MyBB 1.2.10 MyBB MyBB 1.1.8 MyBB MyBB 1.1.7 MyBB MyBB 1.1.6 MyBB MyBB 1.1.5 MyBB MyBB 1.1.4 MyBB MyBB 1.1.2 MyBB MyBB 1.1.1 MyBB MyBB 1.04 MyBB MyBB 1.03 MyBB MyBB 1.02 MyBB MyBB 1.01 MyBB MyBB 1.0 Rc4 MyBB MyBB 1.0 RC3 MyBB MyBB 1.0 Rc2 MyBB MyBB 1.0 Rc1 MyBB MyBB 1.0 Pr2 MyBB MyBB 1.0 Pr1 MyBB MyBB 1.0 Beta4 |
| Not Vulnerable: |
MyBB MyBB 1.8.4 |
Discussion
MyBB 'member.php' Cross Site Scripting Vulnerability
MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Solution / Fix
MyBB 'member.php' Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
MyBB 'member.php' Cross Site Scripting Vulnerability
References:
References: