CVE-2011-5132

CVE-2011-5132

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://blog.mybb.com/2011/11/25/mybb-1-6-5-released-feature-update-security-maintenance-release/http://secunia.com/advisories/46951 https://exchange.xforce.ibmcloud.com/vulnerabilities/71461 http://www.osvdb.org/77326 http://www.securityfocus.com/bid/50816