|
|
CVE Reference: CVE-2006-4449 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-4449 |
|
|
Description: Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/28587 SREASON http://securityreason.com/securityalert/1469 SAID Secunia Advisory: SA21645 CONFIRM http://www.mybboard.com/archive.php?nid=18 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/444414/100/0/threaded BID 19718 |
|
| Return to the previous page. |
