Secunia

HACKERS PAL has discovered a vulnerability in MyBB, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed in the URL to various scripts isn't properly sanitised before being returned to the user as part of the link for "advanced details". This can be exploited to execute arbitrary HTML and script code in a administrative user's browser session in context of an affected site.

Example:
http://[host]/mybb/calendar.php?">[code]

Successful exploitation requires that the victim has logon as an administrative user and uses a browser that has not URL-encoded the request (e.g. Internet Explorer).

The vulnerability has been confirmed in version 1.0.4. Other versions may also be affected.

Solution
The vulnerability has been fixed in version 1.10.

Provided and/or discovered by
HACKERS PAL

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area