Unscored CVE-2006-2949 EUVD-2006-2946GHSA-8ccf-gq4g-4x75

Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via th…

Published Jun 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter.

References

18297 vdb-entry
20492 third-party-advisory
ADV-2006-2190 vdb-entry
mybb-private-xss(26994) vdb-entry
20060606 MyBB 1.1.2 New XSS mailing-list