mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-11 07:22:22 +00:00
Code Issues Releases Activity

Add entry for www/mybb

Browse Source 
Sponsored by:	Netzkommune GmbH
This commit is contained in:
Jochen Neumeister 2019-06-12 17:17:02 +00:00
parent 22e37f101f
commit d579a6de24
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=504028
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
security/vuxml/vuln.xml
View File

@ -58,6 +58,36 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="13960f55-8d35-11e9-9ba0-4c72b94353b5">
<topic>mybb -- vulnerabilities</topic>
<affects>
<package>
<name>mybb</name>
<range><lt>1.8.21</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>mybb Team reports:</p>
<blockquote cite="https://blog.mybb.com/2019/06/10/mybb-1-8-21-released-security-maintenance-release/">
<p>High risk: Theme import stylesheet name RCE</p>
<p>High risk: Nested video MyCode persistent XSS</p>
<p>Medium risk: Find Orphaned Attachments reflected XSS</p>
<p>Medium risk: Post edit reflected XSS</p>
<p>Medium risk: Private Messaging folders SQL injection</p>
<p>Low risk: Potential phar deserialization through Upload Path</p>
</blockquote>
</body>
</description>
<references>
<url>https://blog.mybb.com/2019/06/10/mybb-1-8-21-released-security-maintenance-release/</url>
</references>
<dates>
<discovery>2019-06-10</discovery>
<entry>2019-06-12</entry>
</dates>
</vuln>
<vuln vid="ab099d2c-8c8c-11e9-8ba7-6451062f0f7a">
<topic>Flash Player -- arbitrary code execution</topic>
<affects>