CVE-2017-16780

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• MyBB 1.8.13 - Remote Code Execution2017-11-11 · webapps · php · Verified

Impact

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
• https://www.exploit-db.com/exploits/43136/
• https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
• https://www.exploit-db.com/exploits/43136/