Lucene search
HistoryAug 01, 2006 - 9:04 p.m.
CVE-2006-3953
cve-2006-3953
xss vulnerability
mybb
usercp.php
web security
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.2%
Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.
Affected configurations
Node
mybulletinboardmybulletinboardMatch1.0.1
ORmybulletinboardmybulletinboardMatch1.0.2
ORmybulletinboardmybulletinboardMatch1.0.3
ORmybulletinboardmybulletinboardMatch1.0.4
ORmybulletinboardmybulletinboardMatch1.0_final
ORmybulletinboardmybulletinboardMatch1.0_pr2
ORmybulletinboardmybulletinboardMatch1.0_preview_release_2
ORmybulletinboardmybulletinboardMatch1.00_rc1
ORmybulletinboardmybulletinboardMatch1.00_rc2
ORmybulletinboardmybulletinboardMatch1.0_rc2
ORmybulletinboardmybulletinboardMatch1.00_rc3
ORmybulletinboardmybulletinboardMatch1.0_rc4
ORmybulletinboardmybulletinboardMatch1.00_rc4
ORmybulletinboardmybulletinboardMatch1.00_rc4_security_patch
ORmybulletinboardmybulletinboardMatch1.01
ORmybulletinboardmybulletinboardMatch1.1
ORmybulletinboardmybulletinboardMatch1.1.1
ORmybulletinboardmybulletinboardMatch1.1.2
ORmybulletinboardmybulletinboardMatch1.1.3
ORmybulletinboardmybulletinboardMatch1.1.4
ORmybulletinboardmybulletinboardMatch1.1.5
ORmybulletinboardmybulletinboardMatch1.1.7
ORmybulletinboardmybulletinboardMatch1.04
ORmybulletinboardmybulletinboardMatch1.10
ORmybulletinboardmybulletinboardMatch1.14
ORmybulletinboardmybulletinboardMatch1.20
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2006-3953