CVE-2016-9414

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-01-31

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Merge System (Mybb)
• Mybb (Mybb)

References

• http://www.openwall.com/lists/oss-security/2016/11/10/8
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.securityfocus.com/bid/94395
• https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/