CyberSec.Space Logo
Back to CVE Browser

CVE-2011-5133

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1920%
EPSS Percentile26.61th
PublishedAug 30, 2012
Last ModifiedApr 29, 2026

Vulnerability Description

Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."

Affected Platforms (CPE)

📦
Mybb

Mybb

<= 1.6.4
📦
Mybb

Mybb

= 1.1.0
📦
Mybb

Mybb

= 1.1.1
📦
Mybb

Mybb

= 1.1.2
📦
Mybb

Mybb

= 1.1.3
📦
Mybb

Mybb

= 1.1.4
📦
Mybb

Mybb

= 1.1.5
📦
Mybb

Mybb

= 1.1.6
📦
Mybb

Mybb

= 1.1.7
📦
Mybb

Mybb

= 1.1.8
📦
Mybb

Mybb

= 1.2
📦
Mybb

Mybb

= 1.2.0
📦
Mybb

Mybb

= 1.2.1
📦
Mybb

Mybb

= 1.2.2
📦
Mybb

Mybb

= 1.2.3
📦
Mybb

Mybb

= 1.2.4
📦
Mybb

Mybb

= 1.2.5
📦
Mybb

Mybb

= 1.2.6
📦
Mybb

Mybb

= 1.2.7
📦
Mybb

Mybb

= 1.2.8
📦
Mybb

Mybb

= 1.2.9
📦
Mybb

Mybb

= 1.2.10
📦
Mybb

Mybb

= 1.2.11
📦
Mybb

Mybb

= 1.2.12
📦
Mybb

Mybb

= 1.2.13
📦
Mybb

Mybb

= 1.2.14
📦
Mybb

Mybb

= 1.3
📦
Mybb

Mybb

= 1.4.0
📦
Mybb

Mybb

= 1.4.1
📦
Mybb

Mybb

= 1.4.2
📦
Mybb

Mybb

= 1.4.3
📦
Mybb

Mybb

= 1.4.4
📦
Mybb

Mybb

= 1.4.5
📦
Mybb

Mybb

= 1.4.6
📦
Mybb

Mybb

= 1.4.7
📦
Mybb

Mybb

= 1.4.8
📦
Mybb

Mybb

= 1.4.9
📦
Mybb

Mybb

= 1.4.10
📦
Mybb

Mybb

= 1.4.11
📦
Mybb

Mybb

= 1.4.12
📦
Mybb

Mybb

= 1.4.13
📦
Mybb

Mybb

= 1.4.14
📦
Mybb

Mybb

= 1.4.15
📦
Mybb

Mybb

= 1.4.16
📦
Mybb

Mybb

= 1.5.1
📦
Mybb

Mybb

= 1.5.2
📦
Mybb

Mybb

= 1.6.0
📦
Mybb

Mybb

= 1.6.1
📦
Mybb

Mybb

= 1.6.2
📦
Mybb

Mybb

= 1.6.3

References & Advisories

🔗 http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/
🔗 http://secunia.com/advisories/46951
🔗 http://www.osvdb.org/77325
🔗 http://www.securityfocus.com/bid/50816
🔗 http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/
🔗 http://secunia.com/advisories/46951
🔗 http://www.osvdb.org/77325
🔗 http://www.securityfocus.com/bid/50816

Related Vulnerabilities

CVE-2006-021810.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to...

CVE-2015-278610.0

Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request not...

CVE-2005-420010.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set ...

CVE-2015-897410.0

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 ...