| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-8973 | 7.5 |
xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.
|
05-02-2017 - 21:11 | 31-01-2017 - 22:59 | |
| CVE-2015-8977 | 5.0 |
MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation path via vectors involving error log files.
|
05-02-2017 - 20:57 | 31-01-2017 - 22:59 | |
| CVE-2015-8974 | 7.5 |
SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to execute arbitrary SQL commands via
|
05-02-2017 - 20:56 | 31-01-2017 - 22:59 | |
| CVE-2015-8975 | 4.3 |
Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via unspecified ve
|
03-02-2017 - 16:12 | 31-01-2017 - 22:59 | |
| CVE-2015-8976 | 4.3 |
Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade fil
|
03-02-2017 - 16:11 | 31-01-2017 - 22:59 |