Description
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system.
References
- 17577 third-party-advisory
- 20051114 Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) mailing-list