The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to obtain the installation path via vectors involving sending mails.
CPE | Name | Operator | Version |
---|---|---|---|
merge_system | le | 1.8.6 | |
mybb | le | 1.8.6 |