CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
MyBB 1.8.19 has XSS in the resetpassword function. | 6.1 |
Moyen |
||
MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter. | 5.3 |
Moyen |
||
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter. | 7.5 |