CVE-2012-2326

Published: Aug 13, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.

Affected (62)

Products: Mybb: Mybb

Mybb

1 product

Mybb

Configuration A

62 vulnerable

Vulnerable Software	Affected Versions
Mybb Mybb	Up to 1.6.6
Mybb Mybb	Version 1.00
Mybb Mybb	Version 1.01
Mybb Mybb	Version 1.02
Mybb Mybb	Version 1.03
Mybb Mybb	Version 1.04
Mybb Mybb	Version 1.0 beta4
Mybb Mybb	Version 1.0 pr1
Mybb Mybb	Version 1.0 pr2
Mybb Mybb	Version 1.0 rc1
Mybb Mybb	Version 1.0 rc2
Mybb Mybb	Version 1.0 rc3
Mybb Mybb	Version 1.0 rc4
Mybb Mybb	Version 1.1.0
Mybb Mybb	Version 1.1.1
Mybb Mybb	Version 1.1.2
Mybb Mybb	Version 1.1.3
Mybb Mybb	Version 1.1.4
Mybb Mybb	Version 1.1.5
Mybb Mybb	Version 1.1.6
Mybb Mybb	Version 1.1.7
Mybb Mybb	Version 1.1.8
Mybb Mybb	Version 1.2.0
Mybb Mybb	Version 1.2.10
Mybb Mybb	Version 1.2.11
Mybb Mybb	Version 1.2.12
Mybb Mybb	Version 1.2.13
Mybb Mybb	Version 1.2.14
Mybb Mybb	Version 1.2.1
Mybb Mybb	Version 1.2.2
Mybb Mybb	Version 1.2.3
Mybb Mybb	Version 1.2.4
Mybb Mybb	Version 1.2.5
Mybb Mybb	Version 1.2.6
Mybb Mybb	Version 1.2.7
Mybb Mybb	Version 1.2.8
Mybb Mybb	Version 1.2.9
Mybb Mybb	Version 1.3 pre-1.0
Mybb Mybb	Version 1.4.0
Mybb Mybb	Version 1.4.10
Mybb Mybb	Version 1.4.11
Mybb Mybb	Version 1.4.12
Mybb Mybb	Version 1.4.13
Mybb Mybb	Version 1.4.14
Mybb Mybb	Version 1.4.15
Mybb Mybb	Version 1.4.16
Mybb Mybb	Version 1.4.1
Mybb Mybb	Version 1.4.2
Mybb Mybb	Version 1.4.3
Mybb Mybb	Version 1.4.4
Mybb Mybb	Version 1.4.5
Mybb Mybb	Version 1.4.6
Mybb Mybb	Version 1.4.7
Mybb Mybb	Version 1.4.8
Mybb Mybb	Version 1.4.9
Mybb Mybb	Version 1.5.1
Mybb Mybb	Version 1.5.2
Mybb Mybb	Version 1.6.1
Mybb Mybb	Version 1.6.2
Mybb Mybb	Version 1.6.3
Mybb Mybb	Version 1.6.4
Mybb Mybb	Version 1.6.5