CVE-2015-8973 in MyBB

摘要

由 MITRE

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2016-11-17
• 披露: 2017-01-31
• 管理: 已接受
• 条目: VDB-96323
• CPE: 准备好
• CWE: CWE-284 (已确认)
• CVSS: 8.3 (NVD)
• EPSS: 0.01631
• KEV: 否
• 活动: 非常低
• 部门: Lawfirm, Hostingprovider, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8973
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8973
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8973/