CVE-2006-3761: XSS
Cross-site scripting (XSS) vulnerability in inc/functionspost.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using "javascript".
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3761?
CVE-2006-3761 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2006-3761?
You can fix CVE-2006-3761 by upgrading MyBB to versions 1.1.5 or later, which address the vulnerability.
What versions of MyBB are affected by CVE-2006-3761?
CVE-2006-3761 affects MyBB versions 1.0 RC2 through 1.1.4 inclusively.
How does CVE-2006-3761 impact MyBB users?
CVE-2006-3761 allows remote attackers to inject malicious scripts into MyBB forums, posing risks to users and their data.
Is CVE-2006-3761 a common vulnerability in MyBB?
CVE-2006-3761 is one of the known vulnerabilities in MyBB that has been publicly documented and discussed within the security community.