CVE-2008-3069: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 portal.php and 2 inc/functionspost.php...

CVE-2006-4706: Undefined Security Weakness

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space, as demonstrated usin...

CVE-2006-3761: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using "javascript"...

CVE-2006-2908: Undefined Security Weakness

The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...

CVE-2006-1716: Undefined Security Weakness

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag. NOTE: the email vector is already covered by CVE-2006-1625, although it might stem from the...

CVE-2006-1625

CVE-2006-1625 affects MyBB (aka MyBulletinBoard) 1.10, where a cross-site scripting (XSS) flaw exists in the file inc/functions_post.php . The vulnerability allows remote attackers to inject arbitrary script/HTML via a JavaScript event in a BBCode email tag, demonstrated using the onmousemove eve...

CVE-2006-1625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode email tag, as demonstrated using the onmousemove event...