Description

The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.

Remediation

References

CVE-2015-2352

Related Vulnerabilities

WordPress 4.9.x Arbitrary File Deletion Vulnerability (4.9 - 4.9.6)

WordPress Plugin DELUCKS SEO Unspecified Vulnerability (1.2.2)

WordPress Plugin Ship To eCourier Cross-Site Request Forgery (1.0.1)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7872)

Jboss EAP Other Vulnerability (CVE-2019-9513)

Severity

High

Classification

CVE-2015-2352

Tags

Missing Update Known Vulnerabilities