CVE-2008-3966

Published: Sep 11, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (1) a certain referrer field in usercp2.php, (2) a certain location field in inc/functions_online.php, and certain (3) tsubject and (4) psubject fields in moderation.php.

Affected (30)

Products: Mybb: Mybb

Mybb

1 product

Mybb

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Mybb Mybb	Up to 1.4.0
Mybb Mybb	Version 1.00
Mybb Mybb	Version 1.01
Mybb Mybb	Version 1.02
Mybb Mybb	Version 1.03
Mybb Mybb	Version 1.04
Mybb Mybb	Version 1.1.0
Mybb Mybb	Version 1.1.1
Mybb Mybb	Version 1.1.2
Mybb Mybb	Version 1.1.3
Mybb Mybb	Version 1.1.4
Mybb Mybb	Version 1.1.5
Mybb Mybb	Version 1.1.6
Mybb Mybb	Version 1.1.7
Mybb Mybb	Version 1.1.8
Mybb Mybb	Version 1.2.0
Mybb Mybb	Version 1.2.10
Mybb Mybb	Version 1.2.11
Mybb Mybb	Version 1.2.12
Mybb Mybb	Version 1.2.13
Mybb Mybb	Version 1.2.1
Mybb Mybb	Version 1.2.2
Mybb Mybb	Version 1.2.3
Mybb Mybb	Version 1.2.4
Mybb Mybb	Version 1.2.5
Mybb Mybb	Version 1.2.6
Mybb Mybb	Version 1.2.7
Mybb Mybb	Version 1.2.8
Mybb Mybb	Version 1.2.9
Mybb Mybb	Version 1.2