PT-2005-4530 · Mybulletinboard · Mybb

Syini666 · Published 2005-11-23 · Updated 2016-10-18 · CVE-2005-3777

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyBulletinBoard (MyBB) version 1.0 PR2 Rev 686

Description The issue allows remote attackers to delete or move private messages (PM) by modifying fields in the inbox form.

Recommendations For MyBB version 1.0 PR2 Rev 686, as a temporary workaround, consider restricting access to the inbox form until a patch is available.

Fix

Related Identifiers

CVE-2005-3777

Affected Products

Mybb

References · 4

• http://secunia.com/advisories/17577 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3777 · Security Note
• http://securityreason.com/securityalert/175 · Note
• http://marc.info/?l=bugtraq&m=113198945111329&w=2 · Note