What’s Vulnerable › Vulnerabilities

CVE-2017-16780

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-10 · updated 2026-06-17
• Weakness: CWE-352

Description

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Affected products

• mybb: through 1.8.12

References

• https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
• https://www.exploit-db.com/exploits/43136/
• https://blog.mybb.com/2017/11/07/mybb-1-8-13-released-security-maintenance-release/
• https://www.exploit-db.com/exploits/43136/

Get alerted when CVE-2017-16780 or the next vulnerability affects your stack