CVE-2006-1272

Published: Mar 19, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.

Affected (1)

Products: Mybulletinboard: Mybulletinboard

Mybulletinboard

1 product

Mybulletinboard

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mybulletinboard Mybulletinboard	Version 1.0.3

References (12)

http://community.mybboard.net/showthread.php?tid=7368

Source: cve@mitre.org

http://kapda.ir/advisory-297.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/23935

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/427746/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17097

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/25263

Source: cve@mitre.org

http://community.mybboard.net/showthread.php?tid=7368