high7.5
CVE-2016-9418
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information f…
Impact
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Merge System | through 1.8.7 |
| Mybb | Mybb | through 1.8.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94396
- https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/
- http://www.openwall.com/lists/oss-security/2016/11/10/8
- http://www.openwall.com/lists/oss-security/2016/11/18/1
- http://www.securityfocus.com/bid/94396
- https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/