Vulnerabilities > CVE-2005-1811 - HTML Injection vulnerability in Mybulletinboard 1.0Rc4

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

mybulletinboard

NVD

Published: 2005-06-01

Updated: 2008-09-05

Summary

Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile.

Vulnerable Configurations

Part	Description	Count
Application	Mybulletinboard Mybulletinboard Mybulletinboard 1.0_Rc4	1

References

http://seclists.org/lists/bugtraq/2005/May/0338.html
http://secunia.com/advisories/15552
http://securitytracker.com/id?1014081
http://www.securityfocus.com/bid/13819