Description
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation.
Remediation
References
Related Vulnerabilities
MongoDb Use After Free Vulnerability (CVE-2026-4148)
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0067)
WordPress Plugin YITH WooCommerce Affiliates Security Bypass (1.6.3)
Joomla CVE-2019-7739 Vulnerability (CVE-2019-7739)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46731)