Missing Directory Listing Protection in MyBB and MyBB Merge System Allows Information Disclosure

Missing Directory Listing Protection in MyBB and MyBB Merge System Allows Information Disclosure

CVE-2016-9414 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.

Learn more about our Web Application Penetration Testing UK.