Description
MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2020-2583 Vulnerability (CVE-2020-2583)
Oracle Application Server CVE-2006-3707 Vulnerability (CVE-2006-3707)
WordPress Plugin Visual Composer:Page Builder for WordPress Local File Inclusion (5.1)
MySQL CVE-2013-1544 Vulnerability (CVE-2013-1544)
TYPO3 Cleartext Storage of Sensitive Information Vulnerability (CVE-2026-6553)