CVE-2010-4625

MyBB < 1.4.12 - Unauthenticated Exposure of Sensitive Information via Latest Threads Block

Title source: llm
STIX 2.1

Description

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

References (7)

Core 7
Core References
Issue Tracking x_refsource_confirm
http://dev.mybboard.net/issues/809
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2010/10/08/7
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2010/10/11/8
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2010/12/06/2
Various Sources x_refsource_misc
http://community.mybb.com/thread-66255.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64517

Scores

EPSS 0.0222
EPSS Percentile 80.6%

Details

CWE
CWE-200
Status published
Products (37)
mybb/mybb 1.00
mybb/mybb 1.01
mybb/mybb 1.1.0
mybb/mybb 1.1.1
mybb/mybb 1.1.2
mybb/mybb 1.1.3
mybb/mybb 1.1.4
mybb/mybb 1.1.5
mybb/mybb 1.1.6
mybb/mybb 1.1.7
... and 27 more
Published Dec 30, 2010
Tracked Since Feb 18, 2026