CVE-2016-9402

Critical

Published: 31/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

There is an SQL injection vulnerability in the moderation tool in MyBB before version 1.8.7 and in the MyBB Merge System before version 1.8.7 that may allow remote attackers to execute arbitrary SQL commands.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, potentially resulting in data leakage or modification.

Recommendation

It is recommended to upgrade MyBB to version 1.8.7 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors.