Description
xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.
Unscored
CVE-2015-8973
EUVD-2015-8827GHSA-xfw3-v3jx-w637
xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers t…
Published Jan 31, 2017 · Updated Aug 6, 2024 · Assigned by mitre