CVE-2016-9420 MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mybb merge system | <= 1.8.7 | No fix listed |
| mybb | <= 1.8.7 | No fix listed |
References
- [oss-security] 20161110 CVE request: MyBB multiple vulnerabilities mailing-list patch third-party-advisory
- [oss-security] 20161117 Re: CVE request: MyBB multiple vulnerabilities mailing-list patch third-party-advisory
- 94396 third-party-advisory vdb-entry
- blog.mybb.com patch release-notes vendor-advisory