Description

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.

Remediation

References

CVE-2016-9411

Related Vulnerabilities

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2)

WordPress Plugin WP Fastest Cache SQL Injection (0.8.4.8)

GlassFish Improper Input Validation Vulnerability (CVE-2015-3237)

MySQL CVE-2018-3067 Vulnerability (CVE-2018-3067)

Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11629)

Severity

Medium

Classification

CVE-2016-9411 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities