CVE-2016-9412

Summary

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/94395
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.openwall.com/lists/oss-security/2016/11/10/8
• https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/

References

• http://www.securityfocus.com/bid/94395
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.openwall.com/lists/oss-security/2016/11/10/8
• https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/

• ←Previous
• Next→