CVE-2010-4627

Published: Dec 30, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected (37)

Products: Mybb: Mybb

Mybb

1 product

Mybb

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Mybb Mybb	Up to 1.4.11
Mybb Mybb	Version 1.00
Mybb Mybb	Version 1.01
Mybb Mybb	Version 1.02
Mybb Mybb	Version 1.03
Mybb Mybb	Version 1.04
Mybb Mybb	Version 1.1.0
Mybb Mybb	Version 1.1.1
Mybb Mybb	Version 1.1.2
Mybb Mybb	Version 1.1.3
Mybb Mybb	Version 1.1.4
Mybb Mybb	Version 1.1.5
Mybb Mybb	Version 1.1.6
Mybb Mybb	Version 1.1.7
Mybb Mybb	Version 1.1.8
Mybb Mybb	Version 1.2.0
Mybb Mybb	Version 1.2.10
Mybb Mybb	Version 1.2.11
Mybb Mybb	Version 1.2.12
Mybb Mybb	Version 1.2.13
Mybb Mybb	Version 1.2.1
Mybb Mybb	Version 1.2.2
Mybb Mybb	Version 1.2.3
Mybb Mybb	Version 1.2.4
Mybb Mybb	Version 1.2.5
Mybb Mybb	Version 1.2.6
Mybb Mybb	Version 1.2.7
Mybb Mybb	Version 1.2.8
Mybb Mybb	Version 1.2.9
Mybb Mybb	Version 1.2
Mybb Mybb	Version 1.4.0
Mybb Mybb	Version 1.4.10
Mybb Mybb	Version 1.4.2
Mybb Mybb	Version 1.4.3
Mybb Mybb	Version 1.4.6
Mybb Mybb	Version 1.4.8
Mybb Mybb	Version 1.4.9