CVE-2008-4930: Input Validation

Published Nov 4, 2008

Updated

MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks.

Affected Software

1 affected component

Mybb Mybb=1.4.2

Event History

Nov 4, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4930?

CVE-2008-4930 is categorized as a medium severity vulnerability.

How do I fix CVE-2008-4930?

To fix CVE-2008-4930, you should upgrade MyBB to a later version that addresses MIME-sniffing issues.

What type of attack does CVE-2008-4930 enable?

CVE-2008-4930 allows remote attackers to exploit improper file handling to execute HTML content on Internet Explorer.

Is CVE-2008-4930 specific to certain versions of MyBB?

Yes, CVE-2008-4930 specifically affects MyBB version 1.4.2.

What could be the impact of exploiting CVE-2008-4930?

Exploiting CVE-2008-4930 could lead to data exposure or manipulation due to the unauthorized execution of HTML code.