MyBB is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. MyBB versions 1.6.4 prior to October 6th, 2011 are vulnerable.

The vendor released an update. Please see the references for details.

• http://blog.mybb.com/2011/10/06/1-6-4-security-vulnerabilit/
• http://blog.mybb.com/wp-content/uploads/2011/10/mybb_1604_patches.txt
• http://www.mybb.com/
• http://www.securityfocus.com/bid/49993

---

Updated on 2015-03-25