PT-2005-4530 · Mybulletinboard · Mybb

Syini666 · Publicado 2005-11-23 · Atualizado 2016-10-18 · CVE-2005-3777

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyBulletinBoard (MyBB) version 1.0 PR2 Rev 686

Description The issue allows remote attackers to delete or move private messages (PM) by modifying fields in the inbox form.

Recommendations For MyBB version 1.0 PR2 Rev 686, as a temporary workaround, consider restricting access to the inbox form until a patch is available.

Correção

Identificadores relacionados

CVE-2005-3777

Produtos afetados

Mybb

Referências · 4

• http://securityreason.com/securityalert/175 · Nota
• http://secunia.com/advisories/17577 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3777 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=113198945111329&w=2 · Nota