CVE-2016-9413

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.65%

Published

Jan 31, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Weaknesses (CWE)

CWE-284

Affected Products (2)

mybb · merge_systemvulnerable

mybb · mybbvulnerable

References (8)

http://www.openwall.com/lists/oss-security/2016/11/10/8

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/11/18/1

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/94395

Third Party AdvisoryVDB Entry

https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/

PatchThird Party AdvisoryVendor Advisory

http://www.openwall.com/lists/oss-security/2016/11/10/8

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/11/18/1

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/94395

Third Party AdvisoryVDB Entry

https://blog.mybb.com/2016/03/11/mybb-1-8-7-merge-system-1-8-7-release/

PatchThird Party AdvisoryVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs