NVD

Id
59103  
Name
CVE-2006-0364  
Description
Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as demonstrated by "&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116".  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-22  
Modified Date
2011-03-07  
Seq
2006-0364  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303784 59103 CVE-2006-0364 20060118 MyBB Signature HTML Code Injection  View
303785 59103 CVE-2006-0364 16308  View
303786 59103 CVE-2006-0364 ADV-2006-0255  View
303787 59103 CVE-2006-0364 mybb-html-signature-xss(24225)  View

Related JVN