CVE-2006-4449
Mybulletinboard - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Redworm · javascriptwebappsphp
https://www.exploit-db.com/exploits/28429
References (6)
Scores
EPSS
0.0654
EPSS Percentile
91.2%
Details
Status
published
Products (1)
mybulletinboard/mybulletinboard
1.1.7
Published
Aug 30, 2006
Tracked Since
Feb 18, 2026