CVE-2008-4930 in MyBBinfo

Summary

MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer s content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

11/04/2008

Disclosure

11/04/2008

CPE

ready

CVSS

4.3

EPSS

0.00274

Activities

Very Low

Sources