- Distfile was rerolled to fix a typo in the update script Reported by: pointyhat via pav12c97f09e9
mybb -- multible vulnerabilitiesentered 2020-07-09
no CVE referenced
Port details
www/mybb 1.8.40
PHP-based bulletin board / discussion forum system
Port info
- Maintainer
- dnpowers@me.com
- Packages
- latest: 1.8.40
- Upstream
- up to date
- Last update
- to 1.8.40 · 985692ee87
- Quarterly
- 2026Q4: 1.8.40
- WWW
- https://mybb.com/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install mybbinstalls 1.8.40 fromlatest; fromquarterly(2026Q4) 1.8.40- Port
# cd /usr/ports/www/mybb && make install clean- Size
- 1.4 MiB download · 8.2 MiB installed
- Depends on
- converters/php85-iconv 8.5.12_2, databases/mysql84-client 8.4.11_1, databases/php85-mysqli 8.5.12_2, graphics/php85-gd 8.5.12_2, lang/php85 8.5.12_2, textproc/php85-xml 8.5.12_2, textproc/php85-xsl 8.5.12_2
- License
- GPLv3
- pkg-message
Shown after installing
mybb has been installed into: /usr/local/www/mybb You will probably want to add an alias to your httpd.conf file, something like this: Alias /mybb "/usr/local/www/mybb" And restart Apache. Open the following page in your browser and follow the instructions: http://www.your.host/mybb/install/index.php
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.8.40 | 1.8.40 | – |
| FreeBSD 15 | 1.8.40 | 1.8.40 | – |
| FreeBSD 14 | 1.8.40 | 1.8.40 | ✗ |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.8.40 | 1.8.40 | – |
| FreeBSD 14 | 1.8.40 | 1.8.40 | ✗ |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.8.40.Fixed (28)
Show 28 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-45117 | 9.8 | 2026-08-18 | MyBB is free and open source forum software. From 1.8.13 until 1.8.40, the installer module does not properly escape user-supplied database configuration values written … |
| CVE-2026-45118 | 9.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect an… |
| CVE-2026-45116 | 8.7 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the user datahandler does not properly validate checkbox and multiselect profile field types, resulting in … |
| CVE-2026-45115 | 8.7 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Buddy/Ignore component does not sanitize usernames correctly, allowing attackers to perform JavaScript … |
| CVE-2026-45120 | 5.4 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not verify private event status consistently, allowing users with viewing and mode… |
| CVE-2026-45734 | 5.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypas… |
| CVE-2026-45125 | 5.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Email User controller does not sanitize sender names correctly, resulting in mail header injection. mem… |
| CVE-2026-46482 | 5.3 | 2026-08-18 | ### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially … |
| CVE-2026-45129 | 4.6 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Recovery Codes module does not validate requests correctly, allowing same-site attackers to ro… |
| CVE-2026-45119 | 4.6 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attac… |
| CVE-2026-45124 | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-manage… |
| CVE-2026-47245 | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly. The user… |
| CVE-2026-45122 | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not validate moderation permissions for the destination calendar when moving event… |
| CVE-2026-45121 | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing authenticated … |
| CVE-2026-45123 | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side request fo… |
| CVE-2026-45126 | 3.5 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site … |
| CVE-2026-45128 | 3.5 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to cha… |
| CVE-2026-45127 | 3.5 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain requests correctly, allowing same-site attackers to crea… |
mybb -- vulnerabilitiesentered 2019-06-12
no CVE referenced
mybb -- vulnerabilitiesentered 2019-03-02
no CVE referenced
mybb -- vulnerabilitiesentered 2018-09-13
no CVE referenced
mybb -- vulnerabilitiesentered 2018-09-11
no CVE referenced
mybb -- vulnerabilitiesentered 2018-07-07
no CVE referenced
mybb -- multiple vulnerabilitiesentered 2018-03-24
no CVE referenced
mybb -- multiple vulnerabilitiesentered 2017-12-02
no CVE referenced
mybb -- multiple vulnerabilitiesentered 2017-11-24
no CVE referenced
mybb -- multiple vulnerabilitiesentered 2009-09-30
no CVE referenced
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (57)
- Update 1.4.102242484982
- Update to 1.4.9 Security: http://www.vuxml.org/freebsd/beb6f4a8-add5-11de-8b55-0030843d3802.html6afa9984db
- Update to 1.4.8b391dd0575
- Update to 1.4.69f1d697a0c
- Update to 1.4.5a2f172c8c2
MyBB is a discussion board that has been around for a while; it has evolved from other bulletin boards into the forum package it is today. Therefore, it is a professional and efficient discussion board, developed by an active team of developers. The MyBB history has been recorded and is available for the interested to read. You can also read more about the MyBB team and why they develop MyBB in th WWW: http://mybboard.net/6d440a7e3d