Skip to content

CVE-2017-16780 The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

CriticalCVSS 9.8 EPSS 5.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Affected products

ProductAffected versionsFixed in
mybb <= 1.8.12 No fix listed

References

  • blog.mybb.com release-notes vendor-advisory
  • 43136 exploit third-party-advisory vdb-entry