Unrated severityNVD Advisory· Published Jan 31, 2006· Updated Apr 16, 2026
CVE-2006-0470
CVE-2006-0470
Description
Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection.
Affected products
7cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_preview_release_2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_rc4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- seclists.org/lists/bugtraq/2006/Jan/0414.htmlnvdExploitVendor Advisory
- secunia.com/advisories/18617nvdVendor Advisory
- community.mybboard.net/attachment.phpnvd
- community.mybboard.net/showthread.phpnvd
- securityreason.com/securityalert/374nvd
- www.osvdb.org/22750nvd
- www.securityfocus.com/bid/16387nvd
- www.vupen.com/english/advisories/2006/0350nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24466nvd
News mentions
0No linked articles in our index yet.