MyBB CVE-2015-2335 Information Disclosure Vulnerability

Bugtraq ID:	73216
Class:	Design Error
CVE:	CVE-2015-2335
Remote:	Yes
Local:	No
Published:	Mar 15 2015 12:00AM
Updated:	Mar 15 2015 12:00AM
Credit:	Nathan Malcolm
Vulnerable:	MyBB MyBB 1.8.3 MyBB MyBB 1.8.2 MyBB MyBB 1.8.1 MyBB MyBB 1.6.16 MyBB MyBB 1.6.14 MyBB MyBB 1.6.13 MyBB MyBB 1.6.11 MyBB MyBB 1.6.10 MyBB MyBB 1.6.9 MyBB MyBB 1.6.8 MyBB MyBB 1.6.7 MyBB MyBB 1.6.6 MyBB MyBB 1.6.5 MyBB MyBB 1.6.4 MyBB MyBB 1.6.3 MyBB MyBB 1.6.2 MyBB MyBB 1.6.1 MyBB MyBB 1.4.16 MyBB MyBB 1.4.15 MyBB MyBB 1.4.14 MyBB MyBB 1.4.10 MyBB MyBB 1.4.9 MyBB MyBB 1.4.8 MyBB MyBB 1.4.7 MyBB MyBB 1.4.6 MyBB MyBB 1.4.5 MyBB MyBB 1.4.3 MyBB MyBB 1.4.2 MyBB MyBB 1.2.14 MyBB MyBB 1.2.12 MyBB MyBB 1.2.2 MyBB MyBB 1.2.1 MyBB MyBB 1.2 MyBB MyBB 1.1.3 MyBB MyBB 1.1 MyBB MyBB 1.6.12 MyBB MyBB 1.6.0 MyBB MyBB 1.6 MyBB MyBB 1.5.2 MyBB MyBB 1.5.1 MyBB MyBB 1.4.4 MyBB MyBB 1.4.13 MyBB MyBB 1.4.12 MyBB MyBB 1.4.11 MyBB MyBB 1.4.1 MyBB MyBB 1.4.0 MyBB MyBB 1.2.9 MyBB MyBB 1.2.8 MyBB MyBB 1.2.7 MyBB MyBB 1.2.6 MyBB MyBB 1.2.5 MyBB MyBB 1.2.4 MyBB MyBB 1.2.3 MyBB MyBB 1.2.13 MyBB MyBB 1.2.11 MyBB MyBB 1.2.10 MyBB MyBB 1.1.8 MyBB MyBB 1.1.7 MyBB MyBB 1.1.6 MyBB MyBB 1.1.5 MyBB MyBB 1.1.4 MyBB MyBB 1.1.2 MyBB MyBB 1.1.1 MyBB MyBB 1.04 MyBB MyBB 1.03 MyBB MyBB 1.02 MyBB MyBB 1.01 MyBB MyBB 1.00
Not Vulnerable:	MyBB MyBB 1.8.4

MyBB CVE-2015-2335 Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

MyBB CVE-2015-2335 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MyBB CVE-2015-2335 Information Disclosure Vulnerability

References:

• MyBB 1.8.4 �?? Feature Update, Security & Maintenance Release (MyBB)
  
• MyBB Homepage (MyBB)