Description

MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created.

Remediation

References

CVE-2010-4624

Related Vulnerabilities

Vanilla Forums Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-9889)

WordPress Plugin Comment Attachment Cross-Site Scripting (1.5.5)

SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-1024)

WordPress Plugin Mailing List 'dl.php' Arbitrary File Download (1.4.1)

Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)

Severity

Low

Classification

CVE-2010-4624 CWE-264

Tags

Missing Update Known Vulnerabilities