Description

Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949.

Remediation

References

CVE-2007-0544

Related Vulnerabilities

Oracle Database Server CVE-2007-5530 Vulnerability (CVE-2007-5530)

RubyGems Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-8325)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11034)

WordPress Plugin BuddyPress 'page' Parameter SQL Injection (1.5.4)

Apache HTTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-41773)

Severity

Medium

Classification

CVE-2007-0544

Tags

Missing Update Known Vulnerabilities