CVE-2015-2786

High

Published: 29/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

An unspecified vulnerability in MyBB (MyBulletinBoard) before version 1.8.4 is related to group join request notifications being sent to the wrong group leaders.

Risk Assessment

This vulnerability may lead to unauthorized access to information about group join requests, potentially compromising user data security.

Recommendation

It is recommended to update MyBB to version 1.8.4 or later to mitigate this vulnerability.

Other vulnerabilities in MyBB (MyBulletinBoard)

CVE-2015-2352High
The cache handler in MyBB (MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.

Original NVD description (English source)

Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders."