CVE-2006-1282

Published: Mar 19, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.

Affected (10)

Products: Mybulletinboard: Mybulletinboard

Mybulletinboard

1 product

Mybulletinboard

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Mybulletinboard Mybulletinboard	Version 1.0.1
Mybulletinboard Mybulletinboard	Version 1.0.2
Mybulletinboard Mybulletinboard	Version 1.0.3
Mybulletinboard Mybulletinboard	Version 1.0.4
Mybulletinboard Mybulletinboard	Version 1.0_final
Mybulletinboard Mybulletinboard	Version 1.0_pr2
Mybulletinboard Mybulletinboard	Version rc1
Mybulletinboard Mybulletinboard	Version rc2
Mybulletinboard Mybulletinboard	Version rc3
Mybulletinboard Mybulletinboard	Version rc4