Description
Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in "advanced details". NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 18866 third-party-advisory
- mybb-advanceddetails-xss(24748) vdb-entry
- ADV-2006-0635 vdb-entry
- 23264 vdb-entry