Missing Directory Listing Protection in MyBB and MyBB Merge System Allows Information Disclosure
CVE-2016-9414 · MEDIUM Severity
AV:N/AC:L/AU:N/C:P/I:N/A:N
MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive information by leveraging missing directory listing protection in upload directories.
Learn more about our Web Application Penetration Testing UK.