Description

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation path via vectors involving error log files.

Remediation

References

CVE-2015-8977

Related Vulnerabilities

WordPress Plugin MyLiveChat-Free Live Chat Plugin for WordPress Cross-Site Scripting (2.0.1)

Nginx Improper Certificate Validation Vulnerability (CVE-2021-3618)

SharePoint CVE-2023-28288 Vulnerability (CVE-2023-28288)

WordPress Plugin Comment Rating 'id' Parameter SQL Injection (2.9.23)

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1967)

Severity

High

Classification

CVE-2015-8977 CWE-532 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities