Description

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3967

Related Vulnerabilities

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5652)

Apache Tomcat Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-34487)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2854)

MySQL CVE-2016-0504 Vulnerability (CVE-2016-0504)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-68951)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2008-3967