CVE-2006-1282: XSS
CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1282?
CVE-2006-1282 is classified as a moderate severity vulnerability due to its potential for cross-site scripting and cache poisoning attacks.
How do I fix CVE-2006-1282?
To mitigate CVE-2006-1282, it is recommended to upgrade to the latest version of MyBulletinBoard that has addressed this vulnerability.
What impact can CVE-2006-1282 have on my MyBulletinBoard installation?
Exploiting CVE-2006-1282 can lead to unauthorized access, page hijacking, or execution of malicious scripts in the context of a user's session.
Which versions of MyBulletinBoard are affected by CVE-2006-1282?
CVE-2006-1282 affects MyBulletinBoard versions 1.0_final, rc1, rc2, rc3, rc4, and various other specific release candidates.
Can CVE-2006-1282 be exploited remotely?
Yes, CVE-2006-1282 can be exploited remotely by sending crafted HTTP requests that include CRLF sequences in the Referrer header.