← Database

CVE-2006-3953

MEDIUM CVSS: 4.3 Published: 2006-08-01 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.

Affected Platforms

Mybulletinboard Mybulletinboard

Weakness Type

NVD-CWE-Other

References