Cross site scripting

Cross-site scripting XSS vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to admin/index.php...

MyBB 1.6.6 Cross Site Scripting / SQL Injection

Exploit Title: Multiple vulnerabilities in mybb 1.6.6 Google Dork: intext:"Powered By MyBB" Date: 26th March 2012 Author: Aditya Modha Software Link: http://www.mybb.com/downloads Version: 1.6.6 Tested on: ubuntu CVE : Just applied / Y \ / Y /| Y \ /| \ / Y \ | / | | | | | |/|| / | |\ || | | /...