CVE-2016-9416
Summary
| CVE | CVE-2016-9416 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-01-31 22:59:00 UTC |
| Updated | 2017-02-05 21:10:00 UTC |
| Description | SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. |
Risk And Classification
Problem Types: CWE-89
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mybb | Merge System | All | All | All | All |
| Application | Mybb | Mybb | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - Re: CVE request: MyBB multiple vulnerabilities | MLIST | www.openwall.com | Mailing List, Patch, Third Party Advisory |
| MyBB 1.8.8 & Merge System 1.8.8 Release | MyBB Blog | CONFIRM | blog.mybb.com | Patch, Release Notes, Vendor Advisory |
| oss-security - CVE request: MyBB multiple vulnerabilities | MLIST | www.openwall.com | Mailing List, Patch, Third Party Advisory |
| MyBB Versions Prior To 1.8.8 Multiple Security Vulnerabilities | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.