cve/2021/CVE-2021-3337.md

CVE-2021-3337

Description

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit.

POC

Reference

• http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html

Github

• https://github.com/ARPSyndicate/cvemon