QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-4930

Back to search

CVE-2008-4930

Published: Nov 4, 2008

Modified: Sep 16, 2024

PUBLISHED

Description

MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks.

VendorProductVersions

n/a

n/a

affected
n/a

References

20081027 MyBB 1.4.2: Multiple Vulnerabilties
mailing-list
x_refsource_BUGTRAQ
20081027 MyBB 1.4.2: Multiple Vulnerabilties
mailing-list
x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now