CVE-2006-0770

Published: Feb 18, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in "advanced details". NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected (9)

Products: Mybulletinboard: Mybulletinboard

Mybulletinboard

1 product

Mybulletinboard

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mybulletinboard Mybulletinboard	Version 1.0.1
Mybulletinboard Mybulletinboard	Version 1.0.2
Mybulletinboard Mybulletinboard	Version 1.0.3
Mybulletinboard Mybulletinboard	Version 1.0.4
Mybulletinboard Mybulletinboard	Version 1.0_final
Mybulletinboard Mybulletinboard	Version 1.0_pr2
Mybulletinboard Mybulletinboard	Version 1.0_preview_release_2
Mybulletinboard Mybulletinboard	Version 1.0_rc2
Mybulletinboard Mybulletinboard	Version 1.0_rc4