CVE-2006-4449: Undefined Security Weakness

Cross-site scripting XSS vulnerability in attachment.php in MyBulletinBoard MyBB 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer...