CVEブラウザに戻る

CVE-2015-2786

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0450%

EPSS Percentile22.91th

Published2015年3月29日

Last Modified2026年5月6日

Vulnerability Description

Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."

Affected Platforms (CPE)

📦

Mybb

Mybb

<= 1.8.3

References & Advisories

🔗 http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/

🔗 http://www.securityfocus.com/bid/73394

🔗 http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/

🔗 http://www.securityfocus.com/bid/73394

関連する脆弱性情報

CVE-2006-021810.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to...

CVE-2011-513310.0

Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the b...

CVE-2005-420010.0

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set ...

CVE-2015-897410.0

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 ...