Description

MyBB 1.8.31 has a SQL injection vulnerability in the Admin CP's Users module allows remote authenticated users to modify the query string via direct user input or stored search filter settings.

Remediation

References

CVE-2022-43709

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5606)

WordPress Plugin WP Mobile Menu-The Mobile-Friendly Responsive Menu Cross-Site Scripting (2.8.2.2)

Internet Information Services Other Vulnerability (CVE-1999-1538)

WordPress Plugin Shortcoder-Create Shortcodes for Anything Security Bypass (6.3)

WordPress Plugin WP Link To Us Multiple Cross-Site Scripting Vulnerabilities (2.0)

Severity

Medium

Classification

CVE-2022-43709 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities