CVE-2016-9415: High severity MyBB Merge System vulnerability
Published Jan 31, 2017
·Updated
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwrite arbitrary CSS files via vectors related to "style import."
Affected Software
6 affected components
MyBB Merge System<=1.8.7
MyBB MyBB<=1.8.7
Microsoft Windows
All of the following
Any of the following
MyBB Merge System<=1.8.7
MyBB MyBB<=1.8.7
Microsoft Windows
Remediation
Patch Available
Patch Available
Event History
Jan 31, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9415?
CVE-2016-9415 is considered a medium severity vulnerability due to its potential to allow remote attackers to overwrite arbitrary CSS files.
2
How do I fix CVE-2016-9415?
To fix CVE-2016-9415, upgrade MyBB and the MyBB Merge System to version 1.8.8 or later.
3
What versions are affected by CVE-2016-9415?
CVE-2016-9415 affects MyBB versions prior to 1.8.8 and MyBB Merge System versions before 1.8.8 on Windows.
4
Can CVE-2016-9415 be exploited remotely?
Yes, CVE-2016-9415 can be exploited by remote attackers to manipulate CSS files.
5
What impact does CVE-2016-9415 have on a website?
Exploitation of CVE-2016-9415 could allow attackers to alter the website's appearance by changing CSS files.