[KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag

2006.07.25
Credit: addmimistrator gmail com
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-3761
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

ORIGINAL ADVISORY: http://kapda.ir/page-advisory.html http://myimei.com/security/2006-06-22/mybb-114-function_postphpxss-attac k-in-url-tag.html ???????Summary?????- Software: MyBB Sowtware?s Web Site: http://www.mybboard.com Versions: 1.1.3 Class: Remote Status: Patched Exploit: Available Discovered by: imei addmimistrator Risk Level:low-medium ??????Description????? Mybb has a security bug that allows hackers run unwanted scripts into client?s browser that well known as XSS cross site scripting attack. READ ORIGINAL ADVISORY FOR MORE DETAIL


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top