CVE-2006-0442
published 2006-01-26CVE-2006-0442: Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.84%
76.3th percentile
Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mybb | mybb | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://kapda.ir/advisory-241.htmlhttp://secunia.com/advisories/18603http://securitytracker.com/id?1015535http://www.securityfocus.com/archive/1/423128/100/0/threadedhttp://www.securityfocus.com/bid/16361http://www.vupen.com/english/advisories/2006/0316http://kapda.ir/advisory-241.htmlhttp://secunia.com/advisories/18603http://securitytracker.com/id?1015535http://www.securityfocus.com/archive/1/423128/100/0/threadedhttp://www.securityfocus.com/bid/16361http://www.vupen.com/english/advisories/2006/0316
2006-01-26
Published