CVE-2005-4603: XSS

Published Dec 31, 2005

Updated

Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.

Affected Software

12 affected components

MyBulletinBoard MyBulletinBoard=1.0_rc4

MyBulletinBoard MyBulletinBoard=1.00_rc4

MyBulletinBoard MyBulletinBoard=rc3

MyBulletinBoard MyBulletinBoard=1.00_rc3

MyBulletinBoard MyBulletinBoard=rc2

MyBulletinBoard MyBulletinBoard=rc1

MyBulletinBoard MyBulletinBoard=1.00_rc4_security_patch

MyBulletinBoard MyBulletinBoard=1.00_rc1

MyBulletinBoard MyBulletinBoard=rc4

MyBulletinBoard MyBulletinBoard=1.0_pr2

MyBulletinBoard MyBulletinBoard=1.00_rc2

MyBulletinBoard MyBulletinBoard=1.0.1

Event History

Dec 31, 2005

CVE Published

05:00 AM

Jan 2, 2006

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4603?

CVE-2005-4603 has a moderate severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2005-4603?

To fix CVE-2005-4603, upgrade to a version of MyBB later than 1.0.1 that addresses this XSS vulnerability.

Which versions of MyBB are affected by CVE-2005-4603?

CVE-2005-4603 affects MyBB 1.0.1 and earlier versions, including all release candidates before 1.0.1.

What type of attack can exploit CVE-2005-4603?

CVE-2005-4603 can be exploited through cross-site scripting (XSS), allowing attackers to inject malicious scripts into web pages.

How can I determine if my MyBB installation is vulnerable to CVE-2005-4603?

You can determine if your MyBB installation is vulnerable by checking its version and comparing it to the affected versions list for CVE-2005-4603.