CVE-2016-9403

Critical

Published: 31/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The newreply.php file in MyBB (MyBulletinBoard) before version 1.8.7 and MyBB Merge System before version 1.8.7 has a vulnerability that allows remote attackers to exploit a missing permission check.

Risk Assessment

The lack of proper permission checks may lead to unauthorized access to application functions, posing a risk to data integrity and user security.

Recommendation

It is recommended to update MyBB to version 1.8.7 or later to mitigate this vulnerability.

Original NVD description (English source)

newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check.