Description

SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2016-9402

Related Vulnerabilities

Ruby on Rails Other Vulnerability (CVE-2021-22904)

WordPress Plugin wp Dreamwork Gallery Arbitrary File Upload (2.3)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2153)

Oracle Database Server CVE-2021-2175 Vulnerability (CVE-2021-2175)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.38)

Severity

Critical

Classification

CVE-2016-9402 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities