MyBB version 1.8.6 suffers from improper validation of data passed to eval allowing for the disclosure of the database password.