Description

moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3967

Related Vulnerabilities

PostgreSQL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2020-25694)

PHP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2011-0753)

Omeka Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-13423)

Oracle Database Server CVE-2014-4298 Vulnerability (CVE-2014-4298)

WordPress Plugin BuddyPress Edit Activity Cross-Site Scripting (1.0.5)

Severity

High

Classification

CVE-2008-3967 CWE-264

Tags

Missing Update Known Vulnerabilities