Unscored CVE-2016-9418 EUVD-2016-10228GHSA-wwj2-g4pc-3rc3

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sen…

Published Jan 31, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.

References

https://blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release/
[oss-security] 20161117 Re: CVE request: MyBB multiple vulnerabilities mailing-list
[oss-security] 20161110 CVE request: MyBB multiple vulnerabilities mailing-list
94396 vdb-entry