Description

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

Remediation

References

CVE-2021-27890

Related Vulnerabilities

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)

ColdFusion directory traversal

PostgreSQL Other Vulnerability (CVE-2002-1402)

PHP Out-of-bounds Write Vulnerability (CVE-2021-21704)

Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2023-33950)

Severity

High

Classification

CVE-2021-27890 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities