Description

MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."

Remediation

References

CVE-2016-9420

Related Vulnerabilities

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-19202)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4464)

Oracle HTTP Server CVE-2019-2751 Vulnerability (CVE-2019-2751)

WordPress Plugin Post Content XMLRPC SQL Injection (1.0)

MySQL Other Vulnerability (CVE-2002-1375)

Severity

Critical

Classification

CVE-2016-9420 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities