CVE-2016-9414: Infoleak
Published Jan 31, 2017
·Updated
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Affected Software
2 affected components
MyBB Merge System<=1.8.6
MyBB MyBB<=1.8.6
Remediation
Patch Available
Patch Available
Event History
Jan 31, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9414?
CVE-2016-9414 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-9414?
To fix CVE-2016-9414, upgrade MyBB or MyBB Merge System to version 1.8.7 or later.
3
What is the impact of CVE-2016-9414?
CVE-2016-9414 allows remote attackers to access sensitive information due to insufficient directory listing protection.
4
Which versions of MyBB are affected by CVE-2016-9414?
MyBB versions before 1.8.7, specifically up to 1.8.6, are affected by CVE-2016-9414.
5
Is the MyBB Merge System vulnerable to CVE-2016-9414?
Yes, MyBB Merge System versions prior to 1.8.7 are also vulnerable to CVE-2016-9414.