CVE-2017-8104

In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.