VULNERABILITY INTELLIGENCE

CVE-2015-2334

CVSS score6.8 NONE
EPSS probability0.64%
CISA KEVNot currently listed
Published2015-03-18
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references