Description

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation path via vectors involving error log files.

Remediation

References

CVE-2015-8977

Related Vulnerabilities

WordPress Plugin Easy Google Maps Cross-Site Scripting (1.9.33)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45360)

Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164)

MySQL CVE-2023-21879 Vulnerability (CVE-2023-21879)

IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2019-4151)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-532 CVE-2015-8977