CVE-2016-9412

Description

References

• openwall.com/lists/oss-security/2016/11/10/8 · Mailing List
• openwall.com/lists/oss-security/2016/11/18/1 · Mailing List
• securityfocus.com/bid/94395 · Third Party Advisory
• blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release · Patch

Weitere Schwachstellen in merge system

• CVE-2016-9421MITTEL 6.1Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB …
• CVE-2016-9420KRITISCH 9.8MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors rel…
• CVE-2016-9418HOCH 7.5MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sens…
• CVE-2016-9417HOCH 7.4The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to cond…
• CVE-2016-9416KRITISCH 9.8SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows r…