Vulnerabilities > CVE-2005-4603 - HTML Injection vulnerability in MyBB Print Thread Script

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

mybulletinboard

NVD

Published: 2005-12-31

Updated: 2018-10-19

Summary

Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.

Vulnerable Configurations

Part	Description	Count
Application	Mybulletinboard Mybulletinboard Mybulletinboard 1.0.1 Mybulletinboard Mybulletinboard 1.0_Pr2 Mybulletinboard Mybulletinboard 1.00_Rc1 Mybulletinboard Mybulletinboard 1.00_Rc2 Mybulletinboard Mybulletinboard 1.00_Rc3 Mybulletinboard Mybulletinboard 1.00_Rc4 Mybulletinboard Mybulletinboard 1.0_Rc4 Mybulletinboard Mybulletinboard 1.00_Rc4_Security_Patch Mybulletinboard Mybulletinboard Rc1 Mybulletinboard Mybulletinboard Rc2 Mybulletinboard Mybulletinboard Rc3 Mybulletinboard Mybulletinboard Rc4	12

Summary

Vulnerable Configurations

References