medium5.3
CVE-2017-8104
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
Impact
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mybb | Mybb | through 1.8.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2017/Apr/55
- http://www.securityfocus.com/bid/98045
- https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/
- http://seclists.org/fulldisclosure/2017/Apr/55
- http://www.securityfocus.com/bid/98045
- https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/