CVE-2017-16780

The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

Date published : 2017-11-10

MyBB 1.8.13 Released — Security & Maintenance Release

https://www.exploit-db.com/exploits/43136/