Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyBB Avatar参数文件枚举信息泄露漏洞
Vulnerability Description
MyBB是一款流行的Web论坛程序。 在更改用户的头像时MyBB没有正确地过滤avatar参数便用于检查是否存在文件。由于仅在可确认文件存在的情况下才可以成功执行头像更改，这可能允许攻击者通过目录遍历攻击枚举出已有的文件。
CVSS Information
N/A
Vulnerability Type
N/A