CVE-2016-9418

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-01-31

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Merge System (Mybb)
• Mybb (Mybb)

References

• http://www.openwall.com/lists/oss-security/2016/11/10/8
• http://www.openwall.com/lists/oss-security/2016/11/18/1
• http://www.securityfocus.com/bid/94396
• https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/