Back to CVE Browser

CVE-2015-2786

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0450%

EPSS Percentile22.91th

PublishedMar 29, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."

Affected Platforms (CPE)

📦

Mybb

Mybb

<= 1.8.3

References & Advisories

🔗 http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/

🔗 http://www.securityfocus.com/bid/73394

🔗 http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/

🔗 http://www.securityfocus.com/bid/73394

Related Vulnerabilities

CVE-2006-021810.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to...

CVE-2011-513310.0

Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the b...

CVE-2005-420010.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set ...

CVE-2015-897410.0

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 ...