CVE-2006-0442

EPSS 1.8%

Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/27122unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://kapda.ir/advisory-241.html http://secunia.com/advisories/18603 http://securitytracker.com/id?1015535 http://www.securityfocus.com/archive/1/423128/100/0/threaded http://www.securityfocus.com/bid/16361 http://www.vupen.com/english/advisories/2006/0316