CVE-2016-9402
CRITICALMyBB <1.8.7 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (4)
Scores
CVSS v3
9.8
EPSS
0.0369
EPSS Percentile
87.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-89
Status
draft
Affected Products (2)
mybb/merge_system
< 1.8.6
mybb/mybb
< 1.8.6
Timeline
Published
Jan 31, 2017
Tracked Since
Feb 18, 2026