Description

newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check.

Remediation

References

CVE-2016-9403

Related Vulnerabilities

WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12)

Oracle Application Server Other Vulnerability (CVE-2006-5353)

WordPress Plugin Multicons [Multiple Favicons] Cross-Site Scripting (2.1)

WordPress Plugin Admin PHP Eval Unspecified Vulnerability (1.0)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2024-25605)

Severity

Critical

Classification

CVE-2016-9403 CWE-264 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities