CVE-2015-8973 in MyBB

Tóm tắt

Bởi MITRE

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 17/11/2016
• Tiết lộ: 31/01/2017
• Kiểm duyệt: được chấp nhận
• mục: VDB-96323
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• CVSS: 8.3 (NVD)
• EPSS: 0.01631
• KEV: không
• Các hoạt động: rất thấp
• ngành: Agriculture, Hostingprovider, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8973
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8973
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8973/