← Back

CVE-2006-1281

nvd nist
Published: Mar 19, 2006Modified: Apr 16, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vulnerability than CVE-2006-1272. NOTE: 1.10 was later reported to be vulnerable.

Affected (11)

Mybulletinboard
1 product
Mybulletinboard
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Mybulletinboard
Mybulletinboard
Version 1.0.1
Mybulletinboard
Version 1.0.2
Mybulletinboard
Version 1.0.3
Mybulletinboard
Version 1.0.4
Mybulletinboard
Version 1.0_final
Mybulletinboard
Version 1.0_pr2
Mybulletinboard
Version 1.10
Mybulletinboard
Version rc1
Mybulletinboard
Version rc2
Mybulletinboard
Version rc3
Mybulletinboard
Version rc4

References (20)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.