Unrated severityNVD Advisory· Published Mar 19, 2006· Updated Apr 16, 2026
CVE-2006-1282
CVE-2006-1282
Description
CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
Affected products
10cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- community.mybboard.net/showthread.phpnvdPatch
- kapda.ir/advisory-295.htmlnvdExploitPatchVendor Advisory
- myimei.com/security/2006-03-10/mybb104redirectfunctionheaderinjection.htmlnvdExploit
- www.securityfocus.com/bid/17097nvdExploit
- www.securityfocus.com/archive/1/427747/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25267nvd
News mentions
0No linked articles in our index yet.