CVE-2014-1840

Published: Mar 3, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.

Affected (13)

Products: Mybb: Mybb

Mybb

1 product

Mybb

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Mybb Mybb	version ≤ 1.6.12
Mybb Mybb	Version 1.6.0
Mybb Mybb	Version 1.6.10
Mybb Mybb	Version 1.6.11
Mybb Mybb	Version 1.6.1
Mybb Mybb	Version 1.6.2
Mybb Mybb	Version 1.6.3
Mybb Mybb	Version 1.6.4
Mybb Mybb	Version 1.6.5
Mybb Mybb	Version 1.6.6
Mybb Mybb	Version 1.6.7
Mybb Mybb	Version 1.6.8
Mybb Mybb	Version 1.6.9