A JSON library in MyBB (aka MyBulletinBoard) prior to 1.8.4 allows remote malicious users to obtain the installation path via unknown vectors.
mybb mybb