PT-2018-9400
CVE-2018-1000502
·
تاريخ النشر
2018-06-26
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MyBB versions prior to 1.8.15
Description
The issue is related to a File Inclusion vulnerability in the Admin panel, specifically in the Task Manager section. This vulnerability can lead to Local File Inclusion on modern PHP versions and Remote File Inclusion on older PHP versions. The attack requires access to the admin panel.
Recommendations
For versions prior to 1.8.15, update to version 1.8.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin panel, specifically the Task Manager section, to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾