Security Advisory

CVE-2008-4930

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-11-04 20:00:00

Last updated 2024-09-16 23:10:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks.

← Browse all CVEs View on cve.org ↗