CVE-2006-1272 - Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 a

CVE-2006-1272

Summary

Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.

References

http://community.mybboard.net/showthread.php?tid=7368
http://kapda.ir/advisory-297.html
http://www.osvdb.org/23935
http://www.securityfocus.com/archive/1/427746/100/0/threaded
http://www.securityfocus.com/bid/17097
https://exchange.xforce.ibmcloud.com/vulnerabilities/25263

Vulnerable Configurations

cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 18-10-2018 - 16:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	17097
bugtraq	20060314 [[KAPDA::#35] MyBB 1.0.3~member.php~XSS Attack in contact details
misc	http://community.mybboard.net/showthread.php?tid=7368 http://kapda.ir/advisory-297.html
osvdb	23935
xf	mybb-member-xss(25263)

Last major update

18-10-2018 - 16:31

Published

19-03-2006 - 02:02

Last modified

18-10-2018 - 16:31