Description

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

Remediation

References

CVE-2010-4625

Related Vulnerabilities

osCommerce Other Vulnerability (CVE-2004-2638)

Python Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2019-9740)

Oracle Application Server CVE-2006-0435 Vulnerability (CVE-2006-0435)

Oracle JRE CVE-2013-1561 Vulnerability (CVE-2013-1561)

Drupal Core 8.9.x Security Bypass (8.9.0 - 8.9.5)

Severity

Medium

Classification

CVE-2010-4625 CWE-200

Tags

Missing Update Known Vulnerabilities