Description

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates.

Remediation

References

CVE-2016-9410

Related Vulnerabilities

OpenSSL CVE-2024-0727 Vulnerability (CVE-2024-0727)

WordPress Plugin The Events Calendar Cross-Site Scripting (4.8.1)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12706)

WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)

WordPress Plugin mklasen's Photobox Cross-Site Scripting (1.0)

Severity

High

Classification

CVE-2016-9410 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities