CVE-2016-9416

Critical

Published: 31/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MyBB (MyBulletinBoard) before version 1.8.8 and MyBB Merge System before version 1.8.8 has an SQL injection vulnerability in the users data handler. This allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

This vulnerability could lead to unauthorized access to the database, posing a serious threat to the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to upgrade MyBB to version 1.8.8 or later and conduct a security audit of the application to minimize risk.

Original NVD description (English source)

SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.