CVE-2005-3776 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a new thread and (2) information passed to the Reputation system.

Reference

http://marc.info/?l=bugtraq&m=113198945111329&w=2 http://secunia.com/advisories/17577/