PT-2019-19776 · Mybb · Mybb Upcoming Events Plugin

0Xb9 · Publicado 2019-03-11 · Atualizado 2019-03-26 · CVE-2019-9650

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MyBB Upcoming Events plugin versions prior to 1.33

Description A cross-site scripting (XSS) issue was found in the upcoming events.php file of the Upcoming Events plugin for MyBB. This issue can be triggered by a crafted name for an event.

Recommendations For MyBB Upcoming Events plugin versions prior to 1.33, update to version 1.33 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-9650

Produtos afetados

Mybb Upcoming Events Plugin

Referências · 6

• 🔥 http://packetstormsecurity.com/files/152152/MyBB-Upcoming-Events-1.32-Cross-Site-Scripting.html · Exploit
• 🔥 https://exploit-db.com/exploits/46558 · Exploit
• ❌ https://github.com/vintagedaddyo/MyBB_Plugin-Upcoming_Events/pull/1/commits/d0a0e1c6e56f248613e0150344ebea8764bba5fa · Correção, Deleted
• https://osv.dev/vulnerability/CVE-2019-9650 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9650 · Nota de Segurança
• https://community.mybb.com/mods.php?action=changelog&pid=1231 · Nota