Unscored CVE-2006-0495 EUVD-2006-0502GHSA-fgm7-7vxx-6cgq

Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows re…

Published Feb 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).

References

mybb-usercp2-xss(24392) vdb-entry
16419 vdb-entry
20060129 MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS ) mailing-list