CVE-2019-6979

EPSS 2.1%

An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/ip_history_logs.php useragent field.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/46273/unverified exploitdbwww.exploit-db.com/exploits/46273unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/JeremyCrookshank/IP_History_Logs/pull/1 https://www.exploit-db.com/exploits/46273/