CVE-2016-9415

Description

References

• openwall.com/lists/oss-security/2016/11/10/8 · Mailing List
• openwall.com/lists/oss-security/2016/11/18/1 · Mailing List
• securityfocus.com/bid/94396 · Third Party Advisory
• blog.mybb.com/2016/10/17/mybb-1-8-8-merge-system-1-8-8-release · Patch

merge system의 다른 취약점

• CVE-2016-9421보통 6.1Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB …
• CVE-2016-9420심각 9.8MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors rel…
• CVE-2016-9418높음 7.5MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sens…
• CVE-2016-9417높음 7.4The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to cond…
• CVE-2016-9416심각 9.8SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows r…