Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:merge_system:1.8.5:*:*:*:*:*:*:*

part: a version: 1.8.5 update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMerge System (a3280fa4-0fad-5b32-bf4a-4824f9c1eff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mybb/merge-system purl2cpe 2026-06-01 10:11:09.767941

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8976 vulnerable 2026-06-03 14:35:13.779238 Details available
Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade files."
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T08:36:31.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8975 vulnerable 2026-06-03 14:35:13.778589 Details available
Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T08:36:30.559Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.