Description

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.

Remediation

References

CVE-2016-9418

Related Vulnerabilities

WordPress Plugin Solve Media CAPTCHA Cross-Site Request Forgery (1.1.0)

WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)

SugarCRM Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-35810)

WordPress Plugin Google Analytics MU Cross-Site Request Forgery (2.3.1)

Java Denial of Service (DoS) Vulnerability (CVE-2018-11212)

Severity

High

Classification

CVE-2016-9418 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities