Vulnerabilities (CVE)

Filtered by vendor Mybulletinboard Subscribe
Filtered by product Mybulletinboard
Total 63 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0364 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116".
CVE-2006-1717 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 5.1 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit new threads by unregistered users, allows remote attackers to inject arbitrary web script or HTML via the username.
CVE-2006-2949 1 Mybulletinboard 1 Mybulletinboard 2025-04-03 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter.