Vulnerability in Mybulletinboard
CVE-2005-3776
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system.
EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.
Affected products
- Mybulletinboard — versions preview_release_2_rev_686
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)