Description

Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.

Remediation

References

CVE-2014-1840

Related Vulnerabilities

Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43331)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.12)

Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)

Oracle Database Server Other Vulnerability (CVE-2007-3859)

WebLogic CVE-2018-2893 Vulnerability (CVE-2018-2893)

Severity

Medium

Classification

CVE-2014-1840 CWE-707

Tags

Missing Update Known Vulnerabilities