Kellanved

**Name of the Vulnerable Software and Affected Versions** MyBB versions 1.4.2 **Description** The issue arises from improper handling of uploaded files with nonstandard file types that contain HTML sequences, allowing remote attackers to cause these files to be processed as HTML. This could potentially be leveraged for cross-site scripting (XSS) and other attacks. **Recommendations** For version 1.4.2, update to a version that properly handles file uploads and MIME types to prevent HTML sequences in uploaded files from being executed.

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 2.0.22 Description: The issue is related to the criteria for 'bad' redirection targets, allowing for remote attack vectors. The exact impact of this issue is not specified. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 2.0.22 Description: The issue is related to a "negative start parameter" and has remote attack vectors, but the impact is unknown. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 2.0.22 Description: The issue concerns certain forms in phpBB that lack session checks. The impact and attack vectors of this issue are remote, but the specific effects are unknown. Recommendations: For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** phpBB versions 2.0.x **Description** The issue concerns a cross-site scripting (XSS) vulnerability in the private message box implementation. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the `message body` field in a message to a non-existent user. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For phpBB versions 2.0.x, update to a version that fixes this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** phpBB version 2.0.21 **Description** The issue arises from improper handling of pathnames ending in %00, allowing remote authenticated administrative users to upload arbitrary files. This can be achieved by sending a query to the "admin/admin board.php" endpoint with an `avatar path` parameter ending in `.php%00`. **Recommendations** For phpBB version 2.0.21, as a temporary workaround, consider restricting access to the `admin/admin board.php` endpoint to minimize the risk of exploitation. Avoid using the `avatar path` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.