CVE-2016-9420

概要

参考情報

• openwall.com/lists/oss-security/2016/11/10/8 · Mailing List
• openwall.com/lists/oss-security/2016/11/18/1 · Mailing List
• securityfocus.com/bid/94396 · Third Party Advisory
• blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release · Patch

merge system のその他の脆弱性

• CVE-2016-9421中 6.1Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB …
• CVE-2016-9418高 7.5MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sens…
• CVE-2016-9417高 7.4The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to cond…
• CVE-2016-9416緊急 9.8SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows r…
• CVE-2016-9415高 7.5MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitra…