Description
Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.
References
- ADV-2006-0012 vdb-entry
- 20051231 MyBB XSS cross-site scripting mailing-list
- 18281 third-party-advisory
- 310 third-party-advisory
- 21601 vdb-entry
- 16096 vdb-entry