CVE-2017-8104
In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2017-04-24
- Last modified
- 2024-08-05
- Weaknesses
- CWE-22
Affected products
References
- http://seclists.org/fulldisclosure/2017/Apr/55
- http://www.securityfocus.com/bid/98045
- https://blog.mybb.com/2017/04/04/mybb-1-8-11-merge-system-1-8-11-release/
