⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-2334

MEDIUM · 6.8 CVSS Gepubliceerd: 18-03-2015 CWE-352

Beschrijving

Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendors

Mybb

Affected products

Mybb

References

blog.mybb.com
www.securityfocus.com
www.securitytracker.com