blog.mybb.comConfirmation
https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release CVE-2017-16780
CRITICAL
MyBB 1.8.13 - Remote Code Execution
Record summary
CVE-2017-16780 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMyBB 1.8.13 - Remote Code ExecutionExploitDB exploitby PabstersacNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-16780 43136exploit
https://www.exploit-db.com/exploits/43136