CVE-2015-2334

Description

Cross-site request forgery (CSRF) vulnerability in the Admin Control Panel (ACP) login in MyBB (aka MyBulletinBoard) before 1.8.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

http://www.securitytracker.com/id/1031953

http://www.securityfocus.com/bid/73214

http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3