CVE-2017-16780: CSRF
First published: Fri Nov 10 2017(Updated: )
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mybb Mybb | <=1.8.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-16780?
CVE-2017-16780 is a vulnerability in the installer of MyBB before version 1.8.13 that allows remote attackers to execute arbitrary code by writing to the configuration file.
How severe is CVE-2017-16780?
CVE-2017-16780 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2017-16780?
To fix CVE-2017-16780, you should update MyBB to version 1.8.13 or later.
Where can I find more information about CVE-2017-16780?
You can find more information about CVE-2017-16780 on the MyBB blog at [link1] and on Exploit Database at [link2].
What is CWE-352?
CWE-352 is a Common Weakness Enumeration category that refers to cross-site scripting (XSS) vulnerabilities.
- collector/nvd-index
- vendor/mybb
- canonical/mybb mybb
- version/mybb mybb/1.8.12