Unscored CVE-2016-9412 EUVD-2016-10222GHSA-6383-pc77-7rvv

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related t…

Published Jan 31, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy.

References

94395 vdb-entry
[oss-security] 20161117 Re: CVE request: MyBB multiple vulnerabilities mailing-list
[oss-security] 20161110 CVE request: MyBB multiple vulnerabilities mailing-list
https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/