MyBB Documentation

Version 1.6.18

MyBB 1.6.18

Version: 1.6.18 (code 1618)
Release date: 7 September 2015
Type: Security


Security vulnerabilities addressed (3)

Severity Description Reported by
Medium risk Forum password bypass in xmlhttp.php
Low risk SQL Injection in Grouppromotions module (ACP)
Low risk Possible XSS Injection in the error handler
Low risk Possible XSS issues in old upgrade files

Update Details

Changed Files

  • admin
    • modules
      • user
        • group_promotions.php
  • inc
    • class_core.php
    • class_error.php
    • functions.php
  • install
    • resources
      • upgrade3.php
      • upgrade12.php
      • upgrade13.php
      • upgrade17.php
  • xmlhttp.php

Edit this page on GitHub