medium6.5Public exploit code
CVE-2018-11502
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyBB Moderator Log Notes Plugin 1.1 - Cross-Site Request Forgery2018-08-20 · webapps · php
Impact
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. An attacker can remotely delete all mod notes and mod note logs in the modCP and ACP via CSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moderator Log Notes Project | Moderator Log Notes | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/148999/MyBB-Moderator-Log-Notes-1.1-Cross-Site-Request-Forgery.html
- https://www.exploit-db.com/exploits/45224/
- https://packetstormsecurity.com/files/148999/MyBB-Moderator-Log-Notes-1.1-Cross-Site-Request-Forgery.html
- https://www.exploit-db.com/exploits/45224/