CVE-2016-9418

Summary

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.openwall.com/lists/oss-security/2016/11/10/8
• http://www.securityfocus.com/bid/94396

References

• https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.openwall.com/lists/oss-security/2016/11/10/8
• http://www.securityfocus.com/bid/94396

• ←Previous
• Next→