| Package | Affected versions | Patched versions |
|---|---|---|
| merge system | ≤ 1.8.6 | |
| mybb | ≤ 1.8.6 |
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free