Re: CVE request: mybb before 1.4.11 and before 1.4.12

[Josh Bressers <bressers () redhat com>]

----- "Hanno Böck" <hanno () hboeck de> wrote:

> http://blog.mybb.com/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/

This will need a 2009 ID.

> and
>
> http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/

This update hints there are security fixes, but I can't tell what they are.
Does someone have more information? If not I'll let MITRE assign a generic
"something is broken" sort of ID.

Thanks.

-- 
    JB