Description

The cache handler in MyBB (aka MyBulletinBoard) before 1.8.4 does not properly check the encoding of input to the var_export function, which allows attackers to have an unspecified impact via unknown vectors.

Remediation

References

CVE-2015-2352

Related Vulnerabilities

silverstripeCMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-5091)

SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-56164)

WordPress Plugin WordPress Download Manager Unspecified Vulnerability (2.9.96)

WordPress Plugin Ultimate GDPR & CCPA Compliance Toolkit for WordPress Security Bypass (2.4)

Liferay DXP Observable Timing Discrepancy Vulnerability (CVE-2025-43754)

Severity

High

Classification

CVE-2015-2352

Tags

Missing Update Known Vulnerabilities