Servers and applications
CVE-2008-4929
MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames.
- Severity
- High 7.5
- Published
- 4 Nov 2008
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.2% in the next 30 daysHigher than 83% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MyBBServers and applications · cpe:a:mybb:mybb |
|