Description

Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."

Remediation

References

CVE-2011-5133

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16685)

WordPress Plugin AdminPad Cross-Site Request Forgery (2.1)

WordPress Improper Privilege Management Vulnerability (CVE-2020-28036)

Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14232)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13430)

Severity

Critical

Classification

CVE-2011-5133

Tags

Missing Update Known Vulnerabilities