Description

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

Remediation

References

CVE-2010-4625

Related Vulnerabilities

WordPress Plugin WP Unique Article Header Image Cross-Site Request Forgery (1.0)

WordPress Plugin FooBox Image Lightbox Cross-Site Scripting (1.0.4)

WordPress Plugin Are You a Human-The Fun Spam Blocker Cross-Site Scripting (1.4.32)

GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000029)

Oracle Application Server CVE-2007-5516 Vulnerability (CVE-2007-5516)

Severity

Medium

Classification

CVE-2010-4625 CWE-200

Tags

Missing Update Known Vulnerabilities