← Back

CVE-2006-3953

nvd nist
Published: Aug 1, 2006Modified: Apr 16, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.

Affected (26)

Mybulletinboard
1 product
Mybulletinboard
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Mybulletinboard
Mybulletinboard
Version 1.0.1
Mybulletinboard
Version 1.0.2
Mybulletinboard
Version 1.0.3
Mybulletinboard
Version 1.0.4
Mybulletinboard
Version 1.00_rc1
Mybulletinboard
Version 1.00_rc2
Mybulletinboard
Version 1.00_rc3
Mybulletinboard
Version 1.00_rc4
Mybulletinboard
Version 1.00_rc4_security_patch
Mybulletinboard
Version 1.01
Mybulletinboard
Version 1.04
Mybulletinboard
Version 1.0_final
Mybulletinboard
Version 1.0_pr2
Mybulletinboard
Version 1.0_preview_release_2
Mybulletinboard
Version 1.0_rc2
Mybulletinboard
Version 1.0_rc4
Mybulletinboard
Version 1.1.1
Mybulletinboard
Version 1.1.2
Mybulletinboard
Version 1.1.3
Mybulletinboard
Version 1.1.4
Mybulletinboard
Version 1.1.5
Mybulletinboard
Version 1.1.7
Mybulletinboard
Version 1.10
Mybulletinboard
Version 1.14
Mybulletinboard
Version 1.1
Mybulletinboard
Version 1.20

References (6)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.