5.1
CVSSv2

CVE-2006-4972

Published: 25/09/2006 Updated: 17/10/2018
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote malicious users to inject arbitrary web script or HTML via the navbits[][name] parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mybulletinboard mybulletinboard 1.0.1

mybulletinboard mybulletinboard 1.1.1

mybulletinboard mybulletinboard 1.1.2

mybulletinboard mybulletinboard 1.20

mybulletinboard mybulletinboard 1.0_rc2

mybulletinboard mybulletinboard 1.1

mybulletinboard mybulletinboard 1.10

mybulletinboard mybulletinboard 1.14

mybulletinboard mybulletinboard 1.0.2

mybulletinboard mybulletinboard 1.0.3

mybulletinboard mybulletinboard 1.0.4

mybulletinboard mybulletinboard 1.1.3

mybulletinboard mybulletinboard 1.1.4

mybulletinboard mybulletinboard 1.0_final

mybulletinboard mybulletinboard 1.0_preview_release_2

mybulletinboard mybulletinboard 1.1.5

mybulletinboard mybulletinboard 1.1.7