PT-2010-1622 · Mybulletinboard · Mybb

Publicado 2010-04-27 · Atualizado 2025-09-26 · CVE-2009-4813

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyBB (aka MyBulletinBoard) version 1.4.10

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action.

Recommendations For MyBB (aka MyBulletinBoard) version 1.4.10, avoid using the username parameter in the affected donate action until the issue is resolved. Consider restricting access to the myps.php file to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-4813

Produtos afetados

Mybb

Referências · 8

• 🔥 http://exploit-db.com/exploits/10622 · Exploit
• 🔥 https://exploit-db.com/exploits/33439 · Exploit
• 🔥 http://securityfocus.com/bid/37464 · Exploit
• http://secunia.com/advisories/37910 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4813 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4813 · Nota de Segurança
• https://t.me/cveNotify/136641 · Publicação no Telegram
• http://osvdb.org/61298 · Nota