PT-2010-1622 · Mybulletinboard · Mybb

Published 2010-04-27 · Updated 2025-09-26 · CVE-2009-4813

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MyBB (aka MyBulletinBoard) version 1.4.10

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action.

Recommendations For MyBB (aka MyBulletinBoard) version 1.4.10, avoid using the username parameter in the affected donate action until the issue is resolved. Consider restricting access to the myps.php file to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4813

Affected Products

Mybb

References · 8

• 🔥 http://exploit-db.com/exploits/10622 · Exploit
• 🔥 https://exploit-db.com/exploits/33439 · Exploit
• 🔥 http://securityfocus.com/bid/37464 · Exploit
• http://secunia.com/advisories/37910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4813 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4813 · Note
• https://t.me/cveNotify/136641 · Telegram Post
• http://osvdb.org/61298 · Note