CVE-2006-1716: XSS

Published Apr 11, 2006

Updated

Cross-site scripting (XSS) vulnerability in inc/functionspost.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag. NOTE: the email vector is already covered by CVE-2006-1625, although it might stem from the same core issue.

Affected Software

1 affected component

MyBulletinBoard MyBulletinBoard=1.10

Event History

Apr 11, 2006

CVE Published

11:02 PM

Apr 12, 2006

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1716?

CVE-2006-1716 has a medium severity rating due to its potential for cross-site scripting attacks.

How do I fix CVE-2006-1716?

To fix CVE-2006-1716, update MyBulletinBoard to the latest version that addresses this vulnerability.

What types of attacks are possible with CVE-2006-1716?

CVE-2006-1716 allows remote attackers to inject arbitrary web scripts or HTML through BBCode img tags.

Which version of MyBulletinBoard is affected by CVE-2006-1716?

CVE-2006-1716 affects MyBulletinBoard version 1.10.

Is this vulnerability specific to any browser?

CVE-2006-1716 is not specific to any browser and can affect any user accessing the vulnerable system.