Vulnerability Details : CVE-2010-4628

member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service (resource consumption) by making requests to member.php that trigger scans of the entire users table.
Published 2010-12-30 21:00:03
Updated 2017-08-17 01:33:16
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2010-4628

Probability of exploitation activity in the next 30 days: 2.09%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 88 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2010-4628

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
5.0
 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
 NIST

References for CVE-2010-4628

Products affected by CVE-2010-4628

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close