Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit new threads by unregistered users, allows remote attackers to inject arbitrary web script or HTML via the username.
References
Configurations
History
21 Nov 2024, 00:09
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/19516 - Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/430464/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/17427 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/25730 - |
Information
Published : 2006-04-11 23:02
Updated : 2024-11-21 00:09
NVD link : CVE-2006-1717
Mitre link : CVE-2006-1717
CVE.ORG link : CVE-2006-1717
JSON object : View
Products Affected
mybulletinboard
- mybulletinboard
CWE