Approved changes feed: RSS · Atom

cpe:2.3:a:mybb:merge_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMybb (8821e130-2590-5689-a7de-85bc65b3bdf4)
ProductMerge System (a3280fa4-0fad-5b32-bf4a-4824f9c1eff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mybb/merge-system purl2cpe 2026-06-01 10:11:09.767943

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9421 vulnerable 2026-06-08 05:08:23.581264 Details available
Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T02:50:38.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9420 vulnerable 2026-06-08 05:08:23.580890 Details available
MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified impact via vectors related to "loose comparison false positives."
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T02:50:38.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9418 vulnerable 2026-06-08 05:08:23.580134 Details available
MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote attackers to obtain sensitive information from ACP backups via vectors involving a short name.
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T02:50:38.333Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9417 vulnerable 2026-06-08 05:08:23.579745 Details available
The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T02:50:38.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9416 vulnerable 2026-06-08 05:08:23.579350 Details available
SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2017-01-31T22:00:00.000Z
Updated: 2024-08-06T02:50:37.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9415 vulnerable 2026-06-08 05:08:23.578802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9414 vulnerable 2026-06-08 05:08:23.578405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9413 vulnerable 2026-06-08 05:08:23.578022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9412 vulnerable 2026-06-08 05:08:23.577660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9411 vulnerable 2026-06-08 05:08:23.577287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9410 vulnerable 2026-06-08 05:08:23.576901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9409 vulnerable 2026-06-08 05:08:23.576526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9408 vulnerable 2026-06-08 05:08:23.576139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9407 vulnerable 2026-06-08 05:08:23.575626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9406 vulnerable 2026-06-08 05:08:23.575243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9405 vulnerable 2026-06-08 05:08:23.574865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9404 vulnerable 2026-06-08 05:08:23.574488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9403 vulnerable 2026-06-08 05:08:23.574063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9402 vulnerable 2026-06-08 05:08:23.573012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8977 vulnerable 2026-06-08 05:07:05.826309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8974 vulnerable 2026-06-08 05:07:05.822415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8973 vulnerable 2026-06-08 05:07:05.817434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.