| Package | Affected versions | Patched versions |
|---|---|---|
| merge system | ≤ 1.8.7 | |
| mybb | ≤ 1.8.7 |
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free