Description
Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter.
References
- ADV-2006-3666 vdb-entry
- 20060915 MyBB Full path and Cross site scripting vulnerabilities mailing-list
- 1628 third-party-advisory
- 21972 third-party-advisory