|
264381
|
7.5 |
HIGH
Network
|
mybb
|
merge_system mybb
|
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import."
|
CWE-284
Improper Access Control
|
CVE-2016-9415
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264382
|
7.5 |
HIGH
Network
|
mybb
|
mybb merge_system
|
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload director…
|
CWE-200
Information Exposure
|
CVE-2016-9414
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264383
|
6.5 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-9413
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264384
|
9.8 |
CRITICAL
Network
|
mybb
|
mybb merge_system
|
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors related to low adminsid and sid entropy.
|
CWE-284
Improper Access Control
|
CVE-2016-9412
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264385
|
5.3 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.
|
CWE-200
Information Exposure
|
CVE-2016-9411
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264386
|
7.5 |
HIGH
Network
|
mybb
|
mybb merge_system
|
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates.
|
CWE-200
Information Exposure
|
CVE-2016-9410
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264387
|
6.1 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web …
|
CWE-79
Cross-site Scripting
|
CVE-2016-9409
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264388
|
6.1 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web sc…
|
CWE-79
Cross-site Scripting
|
CVE-2016-9408
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264389
|
6.1 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors …
|
CWE-79
Cross-site Scripting
|
CVE-2016-9407
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264390
|
6.1 |
MEDIUM
Network
|
mybb
|
mybb merge_system
|
Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web s…
|
CWE-79
Cross-site Scripting
|
CVE-2016-9406
|
2024-11-21 12:01 |
2017-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|