CVE-2015-2352

High

Published: 19/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The cache handler in MyBB (MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.

Risk Assessment

The organization may be exposed to unknown attack vectors, potentially leading to unauthorized access or data manipulation.

Recommendation

It is recommended to update MyBB to version 1.8.4 or later to mitigate this vulnerability.

Other vulnerabilities in MyBB (MyBulletinBoard)

CVE-2015-2786High
An unspecified vulnerability in MyBB (MyBulletinBoard) before version 1.8.4 is related to group join request notifications being sent to the wrong group leaders.

Original NVD description (English source)

The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.