CVE-2016-9421

<= 1.8.7

Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8

6.1MEDIUM

CVE-2016-9420

<= 1.8.7

MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via v

9.8CRITICAL

CVE-2016-9418

<= 1.8.7

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to o

7.5HIGH

CVE-2016-9417

<= 1.8.7

The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attacke

7.4HIGH

CVE-2016-9416

<= 1.8.7

SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.

9.8CRITICAL

CVE-2016-9415

<= 1.8.7

MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers to overwri

7.5HIGH

CVE-2016-9414

<= 1.8.6

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information

7.5HIGH

CVE-2016-9413

<= 1.8.6

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to c

6.5MEDIUM

CVE-2016-9412

<= 1.8.6

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact via vectors

9.8CRITICAL

CVE-2016-9411

<= 1.8.6

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to o

5.3MEDIUM

CVE-2016-9410

<= 1.8.6

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive databa

7.5HIGH

CVE-2016-9409

<= 1.8.6

Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge Syst

6.1MEDIUM

CVE-2016-9408

<= 1.8.6

Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System

6.1MEDIUM

CVE-2016-9407

<= 1.8.6

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow

6.1MEDIUM

CVE-2016-9406

<= 1.8.6

Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge Syste

6.1MEDIUM

CVE-2016-9405

<= 1.8.6

Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System bef

6.1MEDIUM

CVE-2016-9404

<= 1.8.6

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow

6.1MEDIUM

CVE-2016-9403

<= 1.8.6

newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspeci

9.8CRITICAL

CVE-2016-9402

<= 1.8.6

SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 m

9.8CRITICAL

CVE-2015-8977

<= 1.8.5

MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtai

7.5HIGH

CVE-2015-8976

all versions

Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System

6.1MEDIUM

CVE-2015-8975

all versions

Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 a

6.1MEDIUM

CVE-2015-8974

<= 1.8.5

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18

10.0CRITICAL

CVE-2015-8973

<= 1.8.5

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote at

8.3HIGH