MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-9411 - Vulnerability Database

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-9411

Medium

Reference: CVE-2016-9411

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9411

Title: MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.