VYPR
← All advisories
High severity7.2NVD Advisory· Published Aug 29, 2023· Updated Jun 17, 2026

CVE-2023-41362

CVE-2023-41362

Description

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MyBB/Mybb3 versions
    cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*range: <1.8.36
    • (no CPE)
    • (no CPE)range: <1.8.36

Patches

Vulnerability mechanics

References

4

News mentions

1