Description

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import."

Remediation

References

CVE-2016-9415

Related Vulnerabilities

Ruby Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-5247)

Drupal Improper Authentication Vulnerability (CVE-2010-3685)

WebLogic CVE-2016-0573 Vulnerability (CVE-2016-0573)

WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3)

TYPO3 Cryptographic Issues Vulnerability (CVE-2012-3527)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-284 CVE-2016-9415