CVE-2006-1716

MyBB 1.10 contains a Cross-site Scripting (XSS) flaw in inc/functions_post.php, exploitable via a JavaScript event in a BBCode image tag (and related email-tag variant). This is documented as CVE-2006-1716 (with CVE-2006-1625 noting the email vector). The concrete affected component is the BBCode...