Description

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Remediation

References

CVE-2017-16780

Related Vulnerabilities

MySQL CVE-2020-2812 Vulnerability (CVE-2020-2812)

WordPress Plugin Instagram Feed Unspecified Vulnerability (1.11.3)

WordPress Plugin Podcast Subscribe Buttons Cross-Site Scripting (1.4.1)

WordPress Plugin Social Like Box and Page by WpDevArt Cross-Site Scripting (0.8.40)

Oracle Database Server CVE-2008-2604 Vulnerability (CVE-2008-2604)

Severity

Critical

Classification

CVE-2017-16780 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities