CVE-2007-0544

Severity

60%

Complexity

68%

Confidentiality

106%

Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949.

Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949.

CVSS 2.0 Base Score 6. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:S/C:P/I:P/A:P).

Overview

First reported 18 years ago

2007-01-29 17:28:00

Last updated 6 years ago

2018-10-16 16:33:00

Affected Software

MyBB 1.2.3

1.2.3

References

32967

23934

28837

20070124 [Aria-Security Team] MyBB Cross-Site Scripting

22205

mybb-subject-field-xss(31740)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.