CVE-2010-4522: XSS
Published Dec 30, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.
Affected Software
2 affected components
Mybb Mybb=1.4.14
Mybb Mybb=1.6.0
Remediation
Event History
Dec 30, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4522?
CVE-2010-4522 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-4522?
To fix CVE-2010-4522, update MyBB to version 1.6.1 or later.
3
Which MyBB versions are affected by CVE-2010-4522?
CVE-2010-4522 affects MyBB versions 1.4.14 and 1.6.0 prior to 1.6.1.
4
What are the attack vectors for CVE-2010-4522?
The attack vectors for CVE-2010-4522 include editpost.php, member.php, and newreply.php.
5
What type of vulnerability is CVE-2010-4522 classified as?
CVE-2010-4522 is classified as a cross-site scripting (XSS) vulnerability.