CVE-2010-4627

Impact

Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/
• http://dev.mybboard.net/issues/852
• http://openwall.com/lists/oss-security/2010/10/08/7
• http://openwall.com/lists/oss-security/2010/10/11/8
• http://openwall.com/lists/oss-security/2010/12/06/2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64515
• http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/
• http://dev.mybboard.net/issues/852
• http://openwall.com/lists/oss-security/2010/10/08/7
• http://openwall.com/lists/oss-security/2010/10/11/8
• http://openwall.com/lists/oss-security/2010/12/06/2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64515