CVE-2006-4972

Published: Sep 25, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter.

Affected (17)

Products: Mybulletinboard: Mybulletinboard

Mybulletinboard

1 product

Mybulletinboard

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Mybulletinboard Mybulletinboard	Version 1.0.1
Mybulletinboard Mybulletinboard	Version 1.0.2
Mybulletinboard Mybulletinboard	Version 1.0.3
Mybulletinboard Mybulletinboard	Version 1.0.4
Mybulletinboard Mybulletinboard	Version 1.0_final
Mybulletinboard Mybulletinboard	Version 1.0_preview_release_2
Mybulletinboard Mybulletinboard	Version 1.0_rc2
Mybulletinboard Mybulletinboard	Version 1.1.1
Mybulletinboard Mybulletinboard	Version 1.1.2
Mybulletinboard Mybulletinboard	Version 1.1.3
Mybulletinboard Mybulletinboard	Version 1.1.4
Mybulletinboard Mybulletinboard	Version 1.1.5
Mybulletinboard Mybulletinboard	Version 1.1.7
Mybulletinboard Mybulletinboard	Version 1.10
Mybulletinboard Mybulletinboard	Version 1.14
Mybulletinboard Mybulletinboard	Version 1.1
Mybulletinboard Mybulletinboard	Version 1.20