Vulnerabilities > Mybb > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-09-01 CVE-2020-22612 Unspecified vulnerability in Mybb
Installer RCE on settings file write in MyBB before 1.8.22.
network
low complexity
mybb
critical
9.8
2015-03-29 CVE-2015-2786 Security Bypass vulnerability in MyBB
Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."
network
low complexity
mybb
critical
10.0
2012-08-30 CVE-2011-5133 Multiple Security vulnerability in MyBB
Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list."
network
low complexity
mybb
critical
10.0
2006-01-16 CVE-2006-0218 SQL-Injection vulnerability in MyBB
Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php, (4) inc/functions_upload.php, (5) printthread.php, and (6) usercp.php, and probably related to SQL injection.
network
low complexity
mybb
critical
10.0