Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2008-3967
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-11 Sep, 2008 | 01:13
Updated At-15 Nov, 2008 | 07:19

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.5HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE Matches
MyBB
mybb
>>mybb>>Versions up to 1.4.0(inclusive)
cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.00
cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.01
cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.0
cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.1
cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.2
cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.3
cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.4
cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.5
cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.6
cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.7
cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.1.8
cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.02
cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2
cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.0
cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.1
cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.2
cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.3
cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.4
cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.5
cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.6
cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.7
cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.8
cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.9
cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.10
cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.11
cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.12
cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.2.13
cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.03
cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*
MyBB
mybb
>>mybb>>1.04
cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-264Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Patch information - http://community.mybboard.net/showthread.php?tid=36022

Vendor Statements
References
HyperlinkSourceResource
http://community.mybboard.net/attachment.php?aid=10579cve@mitre.org
N/A
http://community.mybboard.net/showthread.php?tid=36022cve@mitre.org
N/A
http://secunia.com/advisories/31760cve@mitre.org
N/A
http://www.openwall.com/lists/oss-security/2008/09/09/1cve@mitre.org
N/A
http://www.openwall.com/lists/oss-security/2008/09/09/9cve@mitre.org
N/A
http://www.securityfocus.com/bid/31104cve@mitre.org
N/A
Change History
0Changes found
Details not found