Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
Remediation
References
Related Vulnerabilities
WordPress Plugin pipdig Power pack (p3) Backdoor (4.7.3)
Oracle JRE CVE-2013-5800 Vulnerability (CVE-2013-5800)
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.3)
WordPress 4.0 Multiple Vulnerabilities (4.0)
WordPress Plugin N-Media Post Front-end Form Arbitrary File Upload (1.0)