CVE-2006-0470

medium

Description

Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24466

http://www.vupen.com/english/advisories/2006/0350

http://www.securityfocus.com/bid/16387

http://www.osvdb.org/22750

http://securityreason.com/securityalert/374

http://secunia.com/advisories/18617

http://community.mybboard.net/showthread.php?tid=6418

http://community.mybboard.net/attachment.php?aid=2181

Details

Source: Mitre, NVD

Published: 2006-01-31

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N