The SQL Injection vulnerability, which affected
all MyBB versions, affected the post editing section. The second flaw
allowed brute-force access because the CAPTCHA system was not effective.
An issue which prevented the editor from working in Firefox 16 and newer versions of the web browser has also been addressed.
Users are advised to immediately update their installations, but not before backing up their forum files and databases.
Those who identify similar vulnerabilities are advised to responsibly disclose them to the vendor via their contact page or via the Private Inquiries forum.
An issue which prevented the editor from working in Firefox 16 and newer versions of the web browser has also been addressed.
Users are advised to immediately update their installations, but not before backing up their forum files and databases.
Those who identify similar vulnerabilities are advised to responsibly disclose them to the vendor via their contact page or via the Private Inquiries forum.
