Description

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3967

Related Vulnerabilities

OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2022-2097)

WordPress Plugin WordPress Mobile Pack Information Disclosure (2.0.1)

Beego Framework Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-16354)

Phusion Passenger Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2119)

PHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-1735)

Severity

High

Classification

CVE-2008-3967 CWE-264

Tags

Missing Update Known Vulnerabilities