CVE-2011-5132: XSS
Published Aug 30, 2012
·Updated
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."
Affected Software
50 affected components
Mybb Mybb=1.2.10
Mybb Mybb=1.4.11
Mybb Mybb=1.2.8
Mybb Mybb=1.4.3
Mybb Mybb=1.4.12
Mybb Mybb=1.1.1
Mybb Mybb=1.4.5
Mybb Mybb=1.1.3
Mybb Mybb=1.2.2
Mybb Mybb=1.6.1
Mybb Mybb=1.4.14
Mybb Mybb=1.2.9
Mybb Mybb=1.4.8
Mybb Mybb=1.4.15
Mybb Mybb=1.2.1
Mybb Mybb=1.1.6
Mybb Mybb=1.2.6
Mybb Mybb=1.4.0
Mybb Mybb=1.2.0
Mybb Mybb=1.4.1
Mybb Mybb=1.5.2
Mybb Mybb=1.2.14
Mybb Mybb=1.3-pre-1.0
Mybb Mybb=1.6.0
Mybb Mybb=1.4.9
Mybb Mybb=1.2.5
Mybb Mybb=1.4.2
Mybb Mybb=1.1.8
Mybb Mybb=1.5.1
Mybb Mybb=1.2.11
Mybb Mybb=1.1.5
Mybb Mybb=1.2.13
Mybb Mybb=1.6.3
Mybb Mybb=1.4.6
Mybb Mybb=1.1.0
Mybb Mybb=1.2.3
Mybb Mybb=1.4.10
Mybb Mybb=1.4.4
Mybb Mybb=1.4.7
Mybb Mybb=1.2.7
Mybb Mybb=1.4.16
Mybb Mybb=1.1.7
Mybb Mybb=1.1.4
Mybb Mybb<=1.6.4
Mybb Mybb=1.4.13
Mybb Mybb=1.2.4
Mybb Mybb=1.2
Mybb Mybb=1.2.12
Mybb Mybb=1.6.2
Mybb Mybb=1.1.2
Event History
Aug 30, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5132?
CVE-2011-5132 is classified as a medium severity vulnerability due to its potential to allow attackers to execute arbitrary scripts via usernames.
2
How do I fix CVE-2011-5132?
To fix CVE-2011-5132, update MyBB to version 1.6.5 or later where the vulnerability is patched.
3
What versions are affected by CVE-2011-5132?
CVE-2011-5132 affects MyBB versions prior to 1.6.5, including all versions up to and including 1.6.4.
4
What type of vulnerability is CVE-2011-5132?
CVE-2011-5132 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web scripts.
5
Can CVE-2011-5132 be exploited remotely?
Yes, attackers can exploit CVE-2011-5132 remotely by injecting malicious scripts through vulnerable usernames.