CVE-2015-8977

概要

参考情報

• openwall.com/lists/oss-security/2016/11/10/8 · Third Party Advisory
• openwall.com/lists/oss-security/2016/11/18/1 · Mailing List
• securityfocus.com/bid/94397 · Third Party Advisory
• blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release · Release Notes

merge system のその他の脆弱性

• CVE-2016-9421中 6.1Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB …
• CVE-2016-9420緊急 9.8MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors rel…
• CVE-2016-9418高 7.5MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sens…
• CVE-2016-9417高 7.4The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to cond…
• CVE-2016-9416緊急 9.8SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows r…