Description

Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2015-2334

Related Vulnerabilities

MySQL CVE-2016-0668 Vulnerability (CVE-2016-0668)

Oracle JRE CVE-2022-21628 Vulnerability (CVE-2022-21628)

Ruby Improper Input Validation Vulnerability (CVE-2018-8779)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-32297)

WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Cross-Site Scripting (1.4)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2015-2334