Description

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.

Remediation

References

CVE-2016-9418

Related Vulnerabilities

WordPress Plugin Blaze Slideshow 'upload.php' Arbitrary File Upload (2.4)

Artifactory Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-10036)

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4225)

Sqlite CVE-2021-36690 Vulnerability (CVE-2021-36690)

Java Unspesificed Vulnerability (CVE-2019-2816)

Severity

High

Classification

CVE-2016-9418 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities