CVE-2006-1625: XSS
Published Apr 5, 2006
·Updated
Cross-site scripting (XSS) vulnerability in inc/functionspost.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode email tag, as demonstrated using the onmousemove event.
Affected Software
1 affected component
MyBulletinBoard MyBulletinBoard=1.10
Event History
Apr 5, 2006
CVE Published
10:04 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1625?
CVE-2006-1625 has a medium severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2006-1625?
To fix CVE-2006-1625, update MyBB to a version that addresses this vulnerability.
3
What are the potential impacts of CVE-2006-1625?
The potential impacts of CVE-2006-1625 include unauthorized access to user sessions and the ability to deface webpages.
4
Who is affected by CVE-2006-1625?
Users of MyBB version 1.10 are affected by CVE-2006-1625.
5
What type of vulnerability is CVE-2006-1625?
CVE-2006-1625 is a cross-site scripting (XSS) vulnerability.