PT-2015-5722 · Mybb · Mybb

Atofighi · Published 2015-03-18 · Updated 2016-12-03 · CVE-2015-2335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4

Description A JSON library in MyBB allows remote attackers to obtain the installation path via unknown vectors.

Recommendations For versions prior to 1.8.4, update to version 1.8.4 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-2335

Affected Products

Mybb

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2335 · Security Note
• http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2335 · Note
• http://securityfocus.com/bid/73216 · Note
• http://securitytracker.com/id/1031953 · Note