CVE-2006-0495 Information

Description

Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).

Reference

http://www.securityfocus.com/archive/1/423443/100/0/threaded 20060129 MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS ) http://www.securityfocus.com/bid/16419 https://exchange.xforce.ibmcloud.com/vulnerabilities/24392 Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable).