Description

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3967

Related Vulnerabilities

WordPress Plugin WP-UserOnline Cross-Site Scripting (2.87.6)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5205)

WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.0)

e107 Other Vulnerability (CVE-2005-2559)

WordPress Plugin WP Header Images Cross-Site Scripting (2.0.0)

Severity

High

Classification

CVE-2008-3967 CWE-264

Tags

Missing Update Known Vulnerabilities