Description

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3967

Related Vulnerabilities

Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-9327)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33937)

WordPress Other Vulnerability (CVE-2007-3239)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41174)

WordPress Plugin WP Canvas-Shortcodes Cross-Site Scripting (2.06)

Severity

High

Classification

CVE-2008-3967 CWE-264

Tags

Missing Update Known Vulnerabilities