CVE-2015-2352 Code injection in n/a
Attackers can exploit improper input handling in the cache handler to potentially execute arbitrary code in MyBB forum software.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2015-2352?
CVE-2015-2352 is a high-severity code injection vulnerability in Mybb Mybb, published on 19 Mar 2015. It can be exploited over the network.
Official description
The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.
Which versions are affected by CVE-2015-2352?
It affects 1 product.
Products include Mybb Mybb.
How do I fix CVE-2015-2352?
No fix has been published for CVE-2015-2352 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2015-2352 being exploited?
There is no known exploitation of CVE-2015-2352 in the wild and no public exploit code.
Other vulnerabilities in Mybb Mybb
Sources
Also known as GHSA-2w9c-58xw-cr7x.