Description

Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2010-4627

Related Vulnerabilities

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-45452)

WordPress Plugin Global Content Blocks PHP Code Execution and Information Disclosure Vulnerabilities (1.5.1)

PHP Out-of-bounds Read Vulnerability (CVE-2022-31630)

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)

WordPress Plugin Login as User or Customer Privilege Escalation (3.2)

Severity

Medium

Classification

CVE-2010-4627 CWE-352

Tags

Missing Update Known Vulnerabilities