CVE
- Id
- 17386
- CVE No.
- CVE-2006-1282
- Status
- Candidate
- Description
- CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
- Phase
- Assigned (20060318)
- Votes
- None (candidate not yet proposed)
- Comments