CVE

Id
76542  
CVE No.
CVE-2014-9241  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to report.php, (2) signature parameter in a do_editsig action to usercp.php, or (3) title parameter in the style-templates module in an edit_template action or (4) file parameter in the config-languages module in an edit action to admin/index.php.  
Phase
Assigned (20141203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
704119 76542 CVE-2014-9241 MISC:http://packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18366 JVNDB-2014-007241 Zenoss Core のデフォルト設定におけるデータベースの情報を読まれる脆弱性 Zenoss Core のデフォルト設定には、データベースの情報を読まれる、または変更される脆弱性が存在します。 CVE-2014-9249 76542 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007241.html  View