CVE-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

Code injection

Installer RCE on settings file write in MyBB before 1.8.22...

CVE-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

CVE-2020-22612

CVE-2020-22612 affects MyBB prior to 1.8.22. The issue is an Installer Remote Code Execution (RCE) vulnerability caused by settings file writes during installation. Impact is high (RCE via installer) as described in multiple sources. The only remediation provided in the connected documents is to ...