CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2022-43709
https://notcve.org/view.php?id=CVE-2022-43709
MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings. MyBB 1.8.31 tiene una vulnerabilidad de inyección SQL en el módulo Usuarios del Admin CP que permite a los usuarios remotos autenticados modificar la cadena de consulta mediante la entrada directa del usuario o la configuración del filtro de búsqueda almacenada. • https://github.com/mybb/mybb/security/advisories/GHSA-ggp5-454p-867v https://mybb.com • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2022-39265 – Mail settings' command parameter injection in mybb
https://notcve.org/view.php?id=CVE-2022-39265
MyBB is a free and open source forum software. The _Mail Settings_ → Additional Parameters for PHP's mail() function mail_parameters setting value, in connection with the configured mail program's options and behavior, may allow access to sensitive information and Remote Code Execution (RCE). The vulnerable module requires Admin CP access with the `_Can manage settings?_` permission and may depend on configured file permissions. MyBB 1.8.31 resolves this issue with the commit `0cd318136a`. • https://github.com/mybb/mybb/blob/mybb_1830/install/resources/settings.xml#L2331-L2338 https://github.com/mybb/mybb/commit/0cd318136a10b029bb5c8a8f6dddf39d87519797 https://github.com/mybb/mybb/security/advisories/GHSA-hxhm-rq9f-7xj7 https://mybb.com/versions/1.8.31 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 7.2EPSS: 31%CPEs: 1EXPL: 5CVE-2022-24734 – Remote code execution in mybb
https://notcve.org/view.php?id=CVE-2022-24734
MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed on on _Change Settings_ pages. This results in a Remote Code Execution (RCE) vulnerability. The vulnerable module requires Admin CP access with the `Can manage settings?` permission. • https://www.exploit-db.com/exploits/50924 https://github.com/Altelus1/CVE-2022-24734 https://github.com/lavclash75/mybb-CVE-2022-24734 http://packetstormsecurity.com/files/167082/MyBB-1.8.29-Remote-Code-Execution.html http://packetstormsecurity.com/files/167333/MyBB-Admin-Control-Remote-Code-Execution.html https://github.com/mybb/mybb/commit/92012b9831b330714b9f9b4646a98784113489c1 https://github.com/mybb/mybb/security/advisories/GHSA-876v-gwgh-w57f https://mybb.com/versions/1.8.30 https:// • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2021-43281
https://notcve.org/view.php?id=CVE-2021-43281
MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type "php" with PHP code, executed on Change Settings pages. MyBB versiones anteriores a 1.8.29, permite una Inyección de Código Remota por parte de un administrador con el permiso "Can manage settings?". El módulo de administración de configuraciones del CP del Administrador no comprueba correctamente los tipos de configuraciones al insertarlas y actualizarlas, haciendo posible añadir configuraciones del tipo "php" con código PHP, ejecutado en las páginas de cambio de configuraciones • https://github.com/mybb/mybb/security/advisories/GHSA-8gxx-vmr9-h39p • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2021-41866
https://notcve.org/view.php?id=CVE-2021-41866
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly. MyBB versiones anteriores a 1.8.28, permite un ataque de tipo XSS almacenado porque el valor del Nombre de la Plantilla que se muestra en la administración de temas del CP de Administración no escapa apropiadamente • https://github.com/mybb/mybb/security/advisories https://github.com/mybb/mybb/security/advisories/GHSA-gxhv-r3m5-6qv7 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •