CVE-2010-4629
Estado: ModificadaMedia (5)—
MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.71%
- Percentil entre todas las CVEs puntuadas: 77
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
- http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/
- http://dev.mybboard.net/issues/722
- http://dev.mybboard.net/projects/mybb/repository/revisions/4856
- http://openwall.com/lists/oss-security/2010/10/08/7
- http://openwall.com/lists/oss-security/2010/10/11/8
- http://openwall.com/lists/oss-security/2010/12/06/2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64513
- http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/
- http://dev.mybboard.net/issues/722
- http://dev.mybboard.net/projects/mybb/repository/revisions/4856
- http://openwall.com/lists/oss-security/2010/10/08/7
- http://openwall.com/lists/oss-security/2010/10/11/8
- http://openwall.com/lists/oss-security/2010/12/06/2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64513
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-4629",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-12-30T21:00:02.690",
"references": [
{
"url": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://dev.mybboard.net/issues/722",
"source": "cve@mitre.org"
},
{
"url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856",
"source": "cve@mitre.org"
},
{
"url": "http://openwall.com/lists/oss-security/2010/10/08/7",
"source": "cve@mitre.org"
},
{
"url": "http://openwall.com/lists/oss-security/2010/10/11/8",
"source": "cve@mitre.org"
},
{
"url": "http://openwall.com/lists/oss-security/2010/12/06/2",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64513",
"source": "cve@mitre.org"
},
{
"url": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://dev.mybboard.net/issues/722",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openwall.com/lists/oss-security/2010/10/08/7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openwall.com/lists/oss-security/2010/10/11/8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://openwall.com/lists/oss-security/2010/12/06/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64513",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php."
},
{
"lang": "es",
"value": "MyBB (MyBulletinBoard) en versiones anteriores a la 1.4.12 no restringe apropiadamente los valores uid para peticiones de unión de grupo; lo que permite, a atacantes remotos, provocar una denegación de servicio (consumo de todos los recursos) usando un acceso de invitado para enviar formularios de peticiones de unión para grupos moderados. Vulnerabilidad relacionada con usercp.php y managegroup.php."
}
],
"lastModified": "2026-06-16T23:25:12.327",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA9326ED-4299-46B9-B654-0BC7C5282903",
"versionEndIncluding": "1.4.11"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD61D970-9363-4A75-A8DB-D0EBA2CF0D53"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "990E206E-5E2C-4A68-9FDF-CD47F7524054"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF143B59-5C78-4BF6-9368-5BCF427B4753"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B16F6F07-F5A9-47BF-88ED-25F068B68CF6"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8A46A48-1361-4DD3-B97D-4C4FC776D68A"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "337D89AE-1B7A-4101-B1F7-DFEDF2369385"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE08AF25-EDB1-4DA1-B431-F0692858AAAA"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF24E7BA-3144-4DBA-9613-A44FBE0822F9"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "029430A5-85BD-4258-B58D-F3DCBC625E5B"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4183DB7F-FAB3-4D90-AD87-31CA4150CFDD"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E2B90B8-DC02-4C79-BD69-DEF79945C418"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5C52215-D236-4D1A-9E30-14B9676FB68A"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E080342-93CD-4E74-AE60-5858738CE7F5"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B48D2EDF-86C2-475C-9476-E5A2D586CA0E"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6725373-C229-4B57-BB1E-AF178E19DEB0"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36E4C84A-21D5-4C9A-85F8-45C9657CE6F5"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7E55085-E3E3-4BB8-A680-19A28D7E88F4"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB01A9AA-AE70-46DF-815A-05D1101EE706"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98AFD77B-A046-4AB9-B6F4-FFFF66C63C68"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA00D38E-AAF6-4F66-9203-5C074FC61F30"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "137A8CED-BE82-462F-B83C-15F535961E74"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D179FDB6-9B1D-438C-B512-9A5C4F869A4C"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A2D344F-4671-4194-A553-A5773B5DF3B1"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "245760C8-DC10-47F1-843A-461AE2F3DF61"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A055E6BF-3CAC-4C74-8E37-A89E3E0F8559"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1121A071-3709-4B2B-ADF4-EDC560F73E0A"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6ABDEE8-D463-47CA-998D-33472F3382F3"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE44965F-F968-4CD2-9F21-1E1A92F5F7F2"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FC8864E-161F-408E-93D6-693A9238C494"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9503D6C2-DCBC-4720-BE29-34913950407E"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F6FC2B1-45DF-439E-8BAE-A15A08E7D9F7"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B46B7E13-51F8-4950-BBB4-A03B8E5B4750"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A00F1254-67DE-436D-AB83-1C55639BDBD2"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC2FDC2B-2CB4-433F-9290-3A6BE0A929B5"
},
{
"criteria": "cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FF9452B-CF4B-45F0-8487-23D9CCBB1A4A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}