Unrated severityNVD Advisory· Published Dec 30, 2010· Updated Apr 29, 2026
CVE-2010-4627
CVE-2010-4627
Description
Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected products
37cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*+ 36 more
- cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*range: <=1.4.11
- cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:mybb:mybb:1.4.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/nvdPatchVendor Advisory
- dev.mybboard.net/issues/852nvd
- openwall.com/lists/oss-security/2010/10/08/7nvd
- openwall.com/lists/oss-security/2010/10/11/8nvd
- openwall.com/lists/oss-security/2010/12/06/2nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/64515nvd
News mentions
0No linked articles in our index yet.