Vulnerabilities > CVE-2017-7566 - Server-Side Request Forgery (SSRF) vulnerability in Mybb

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2017-04-06

Updated: 2017-04-13

Summary

MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.

Part	Description	Count
Application	Mybb Mybb Mybb 1.0 Mybb Mybb 1.00 Mybb Mybb 1.0.2 Mybb Mybb 1.01 Mybb Mybb 1.1.0 Mybb Mybb 1.1.1 Mybb Mybb 1.1.2 Mybb Mybb 1.1.3 Mybb Mybb 1.1.4 Mybb Mybb 1.1.5 Mybb Mybb 1.1.6 Mybb Mybb 1.1.7 Mybb Mybb 1.1.8 Mybb Mybb 1.02 Mybb Mybb 1.2 Mybb Mybb 1.2.0 Mybb Mybb 1.2.1 Mybb Mybb 1.2.2 Mybb Mybb 1.2.3 Mybb Mybb 1.2.4 Mybb Mybb 1.2.5 Mybb Mybb 1.2.6 Mybb Mybb 1.2.7 Mybb Mybb 1.2.8 Mybb Mybb 1.2.9 Mybb Mybb 1.2.10 Mybb Mybb 1.2.11 Mybb Mybb 1.2.12 Mybb Mybb 1.2.13 Mybb Mybb 1.2.14 Mybb Mybb 1.03 Mybb Mybb 1.3 Mybb Mybb 1.04 Mybb Mybb 1.4.0 Mybb Mybb 1.4.1 Mybb Mybb 1.4.2 Mybb Mybb 1.4.3 Mybb Mybb 1.4.4 Mybb Mybb 1.4.5 Mybb Mybb 1.4.6 Mybb Mybb 1.4.7 Mybb Mybb 1.4.8 Mybb Mybb 1.4.9 Mybb Mybb 1.4.10 Mybb Mybb 1.4.11 Mybb Mybb 1.4.12 Mybb Mybb 1.4.13 Mybb Mybb 1.4.14 Mybb Mybb 1.4.15 Mybb Mybb 1.4.16 Mybb Mybb 1.5.1 Mybb Mybb 1.5.2 Mybb Mybb 1.6.0 Mybb Mybb 1.6.1 Mybb Mybb 1.6.2 Mybb Mybb 1.6.3 Mybb Mybb 1.6.4 Mybb Mybb 1.6.5 Mybb Mybb 1.6.6 Mybb Mybb 1.6.7 Mybb Mybb 1.6.8 Mybb Mybb 1.6.9 Mybb Mybb 1.6.10 Mybb Mybb 1.6.11 Mybb Mybb 1.6.12 Mybb Mybb 1.6.13 Mybb Mybb 1.6.14 Mybb Mybb 1.6.15 Mybb Mybb 1.6.16 Mybb Mybb 1.6.17 Mybb Mybb 1.6.18 Mybb Mybb 1.8.0 Mybb Mybb 1.8.1 Mybb Mybb 1.8.3 Mybb Mybb 1.8.4 Mybb Mybb 1.8.5 Mybb Mybb 1.8.6 Mybb Mybb 1.8.7 Mybb Mybb 1.8.8 Mybb Mybb 1.8.9 Mybb Mybb 1.8.10	88

data source	https://packetstormsecurity.com/files/download/142051/SA-20170407-0.txt
id	PACKETSTORM:142051
last seen	2017-04-10
published	2017-04-07
reporter	Fikri Fadzil
source	https://packetstormsecurity.com/files/142051/MyBB-1.8.10-Server-Side-Request-Forgery.html
title	MyBB 1.8.10 Server-Side Request Forgery