high7.5
CVE-2016-9414
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directo…
Impact
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Merge System | through 1.8.6 |
| Mybb | Mybb | through 1.8.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94395
- https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94395
- https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/