← Database

CVE-2006-0364

MEDIUM CVSS: 4.3 Published: 2006-01-22 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "javascript".

Affected Platforms

Mybulletinboard Mybulletinboard

Weakness Type

CWE-79

References