CVE-2012-5908

CVE-2012-5908 is a Cross-site Scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.6.6. The issue arises in admin/modules/user/users.php where an attacker can inject arbitrary script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php. The provided documen...