Description

MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."

Remediation

References

CVE-2016-9420

Related Vulnerabilities

WordPress Plugin Product Catalog Privilege Escalation (3.8.1)

Drupal Core 4.5.x Cross-Site Scripting (4.5.0 - 4.5.5)

WebLogic CVE-2020-2967 Vulnerability (CVE-2020-2967)

Drupal Core 8.8.x Security Bypass (8.8.0 - 8.8.9)

WordPress Plugin Stylish Price List Security Bypass (6.8.14)

Severity

Critical

Classification

CVE-2016-9420 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities