Description

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.

Remediation

References

CVE-2016-9411

Related Vulnerabilities

MySQL CVE-2022-21264 Vulnerability (CVE-2022-21264)

Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-9494)

WordPress Plugin WP GitHub Tools Cross-Site Scripting (1.4.4)

WordPress Plugin Frontend File Manager Arbitrary File Upload (3.7)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.32)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2016-9411