critical9.8
CVE-2016-9412
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and s…
Impact
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Merge System | through 1.8.6 |
| Mybb | Mybb | through 1.8.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94395
- https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94395
- https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/