Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-19202

A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsetting[bburl]' parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2018-19202
  • Mybb » Mybb » Version: 1.8.0
    cpe:2.3:a:mybb:mybb:1.8.0
  • Mybb » Mybb » Version: 1.8.1
    cpe:2.3:a:mybb:mybb:1.8.1
  • Mybb » Mybb » Version: 1.8.10
    cpe:2.3:a:mybb:mybb:1.8.10
  • Mybb » Mybb » Version: 1.8.11
    cpe:2.3:a:mybb:mybb:1.8.11
  • Mybb » Mybb » Version: 1.8.12
    cpe:2.3:a:mybb:mybb:1.8.12
  • Mybb » Mybb » Version: 1.8.13
    cpe:2.3:a:mybb:mybb:1.8.13
  • Mybb » Mybb » Version: 1.8.14
    cpe:2.3:a:mybb:mybb:1.8.14
  • Mybb » Mybb » Version: 1.8.15
    cpe:2.3:a:mybb:mybb:1.8.15
  • Mybb » Mybb » Version: 1.8.16
    cpe:2.3:a:mybb:mybb:1.8.16
  • Mybb » Mybb » Version: 1.8.17
    cpe:2.3:a:mybb:mybb:1.8.17
  • Mybb » Mybb » Version: 1.8.18
    cpe:2.3:a:mybb:mybb:1.8.18
  • Mybb » Mybb » Version: 1.8.19
    cpe:2.3:a:mybb:mybb:1.8.19
  • Mybb » Mybb » Version: 1.8.2
    cpe:2.3:a:mybb:mybb:1.8.2
  • Mybb » Mybb » Version: 1.8.3
    cpe:2.3:a:mybb:mybb:1.8.3
  • Mybb » Mybb » Version: 1.8.4
    cpe:2.3:a:mybb:mybb:1.8.4
  • Mybb » Mybb » Version: 1.8.5
    cpe:2.3:a:mybb:mybb:1.8.5
  • Mybb » Mybb » Version: 1.8.6
    cpe:2.3:a:mybb:mybb:1.8.6
  • Mybb » Mybb » Version: 1.8.7
    cpe:2.3:a:mybb:mybb:1.8.7
  • Mybb » Mybb » Version: 1.8.8
    cpe:2.3:a:mybb:mybb:1.8.8
  • Mybb » Mybb » Version: 1.8.9
    cpe:2.3:a:mybb:mybb:1.8.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved