Description

MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.

Remediation

References

CVE-2018-7305

Related Vulnerabilities

WordPress 2.6.1 Lost Password SQL Column Truncation Unauthorized Access Vulnerability (0.71 - 2.6.1)

JBoss Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1094)

XWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-41932)

WordPress Plugin Edit Comments XT Cross-Site Scripting (1.0)

MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9069)

Severity

Medium

Classification

CVE-2018-7305 CWE-352 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities