CVE-2006-3953: XSS
Published Aug 1, 2006
·Updated
Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.
Affected Software
26 affected components
MyBulletinBoard MyBulletinBoard=1.0.1
MyBulletinBoard MyBulletinBoard=1.0.2
MyBulletinBoard MyBulletinBoard=1.0.3
MyBulletinBoard MyBulletinBoard=1.0.4
MyBulletinBoard MyBulletinBoard=1.0_final
MyBulletinBoard MyBulletinBoard=1.0_pr2
MyBulletinBoard MyBulletinBoard=1.0_preview_release_2
MyBulletinBoard MyBulletinBoard=1.00_rc1
MyBulletinBoard MyBulletinBoard=1.00_rc2
MyBulletinBoard MyBulletinBoard=1.0_rc2
MyBulletinBoard MyBulletinBoard=1.00_rc3
MyBulletinBoard MyBulletinBoard=1.0_rc4
MyBulletinBoard MyBulletinBoard=1.00_rc4
MyBulletinBoard MyBulletinBoard=1.00_rc4_security_patch
MyBulletinBoard MyBulletinBoard=1.01
MyBulletinBoard MyBulletinBoard=1.1
MyBulletinBoard MyBulletinBoard=1.1.1
MyBulletinBoard MyBulletinBoard=1.1.2
MyBulletinBoard MyBulletinBoard=1.1.3
MyBulletinBoard MyBulletinBoard=1.1.4
MyBulletinBoard MyBulletinBoard=1.1.5
MyBulletinBoard MyBulletinBoard=1.1.7
MyBulletinBoard MyBulletinBoard=1.04
MyBulletinBoard MyBulletinBoard=1.10
MyBulletinBoard MyBulletinBoard=1.14
MyBulletinBoard MyBulletinBoard=1.20
Event History
Aug 1, 2006
CVE Published
09:04 PM
Aug 2, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3953?
The severity of CVE-2006-3953 is classified as medium due to the potential for remote code execution via cross-site scripting.
2
How do I fix CVE-2006-3953?
To fix CVE-2006-3953, it is recommended to upgrade MyBB to a version that has patched this vulnerability.
3
What versions of MyBB are affected by CVE-2006-3953?
CVE-2006-3953 affects MyBB versions 1.0 to 1.20.
4
Is CVE-2006-3953 a remote exploit?
Yes, CVE-2006-3953 allows remote attackers to exploit the vulnerability.
5
What type of vulnerability is CVE-2006-3953?
CVE-2006-3953 is a cross-site scripting (XSS) vulnerability.