CVE-2010-4627: CSRF
Published Dec 30, 2010
·Updated
Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
37 affected components
Mybb Mybb=1.2.10
Mybb Mybb=1.2.8
Mybb Mybb=1.4.3
Mybb Mybb=1.04
Mybb Mybb=1.1.1
Mybb Mybb=1.1.3
Mybb Mybb=1.2.2
Mybb Mybb=1.2.9
Mybb Mybb=1.4.8
Mybb Mybb=1.2.1
Mybb Mybb=1.01
Mybb Mybb=1.1.6
Mybb Mybb=1.2.6
Mybb Mybb=1.4.0
Mybb Mybb=1.2.0
Mybb Mybb=1.4.9
Mybb Mybb=1.02
Mybb Mybb=1.2.5
Mybb Mybb=1.4.2
Mybb Mybb=1.1.8
Mybb Mybb=1.2.11
Mybb Mybb=1.1.5
Mybb Mybb=1.2.13
Mybb Mybb=1.4.6
Mybb Mybb=1.1.0
Mybb Mybb=1.2.3
Mybb Mybb=1.4.10
Mybb Mybb=1.2.7
Mybb Mybb=1.1.7
Mybb Mybb=1.1.4
Mybb Mybb=1.03
Mybb Mybb<=1.4.11
Mybb Mybb=1.00
Mybb Mybb=1.2.4
Mybb Mybb=1.2
Mybb Mybb=1.2.12
Mybb Mybb=1.1.2
Remediation
Event History
Dec 30, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4627?
CVE-2010-4627 has been reported as a moderate severity vulnerability due to its cross-site request forgery nature.
2
How do I fix CVE-2010-4627?
To fix CVE-2010-4627, upgrade MyBB to version 1.4.12 or later, which addresses this CSRF vulnerability.
3
Which versions of MyBB are affected by CVE-2010-4627?
CVE-2010-4627 affects all MyBB versions prior to 1.4.12.
4
What type of vulnerability is CVE-2010-4627?
CVE-2010-4627 is categorized as a cross-site request forgery (CSRF) vulnerability.
5
Are there any known exploits for CVE-2010-4627?
While specific exploits for CVE-2010-4627 are not widely documented, the nature of CSRF vulnerabilities can lead to unauthorized actions being performed on behalf of the user.