Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-8976

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade files."

  • Published: Jan 31, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-8976
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mybb / mybb 1.8.1 1.8.1.x
mybb / mybb 1.8.0 1.8.0.x
mybb / mybb 1.8.3 1.8.3.x
mybb / mybb 1.8.5 1.8.5.x
mybb / mybb 1.8.4 1.8.4.x
mybb / merge_system 1.8.5 1.8.5.x
mybb / mybb 1.8.2 1.8.2.x
mybb / mybb - 1.6.17.x