CVE-2018-1000503 | BDVDB-2026-103045 Detail

Description#

MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in 1.8.15.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.batterystapl.es/2018/03/local-file-inclusion-and-reading.html
https://blog.mybb.com/2018/03/15/mybb-1-8-15-released-security-maintenance-release/

Exploit#

No public exploit known

History#

Version 12018-06-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.