CVE-2015-8973

HIGH · CVSS 8.3 EPSS 1.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-8973

Severity

HIGH

CVSS

8.3

EPSS

1.63%

Original Filing — NVD Description

xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password.