Description

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

Remediation

References

CVE-2010-4625

Related Vulnerabilities

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35413)

PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4545)

Squid Improper Input Validation Vulnerability (CVE-2014-3609)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.6)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (2.0.2)

Severity

Medium

Classification

CVE-2010-4625 CWE-200

Tags

Missing Update Known Vulnerabilities