7 matches found
CVE-2014-3826
Cross-site scripting XSS vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profilefields module...
MyBB Cross-Site Scripting Vulnerability (CNVD-2021-36552)
MyBB is a full-featured and very useful forum software. A cross-site scripting vulnerability exists in MyBB versions prior to 1.6.13. A remote attacker can inject arbitrary web script or HTML via the name parameter of the edit operation in the config-profilefields module...
CVE-2014-3826
Cross-site scripting XSS vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profilefields module...
CVE-2014-3826
Cross-site scripting XSS vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profilefields module...
CVE-2014-3826
Cross-site scripting XSS vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profilefields module...
CVE-2014-3826
CVE-2014-3826 affects MyBB prior to 1.6.13. It is a Cross-site Scripting (XSS) vulnerability exploitable by remote authenticated users via the name parameter in the edit action of the config-profile_fields module. The issue enables injection of arbitrary web script or HTML and is documented acros...
CVE-2014-3826: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit action of the config-profilefields module...