Unrated severityNVD Advisory· Published Mar 19, 2006· Updated Jun 16, 2026
CVE-2006-1282
CVE-2006-1282
Description
CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_final:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:1.0_pr2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc1:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc2:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc3:*:*:*:*:*:*:*
- cpe:2.3:a:mybulletinboard:mybulletinboard:rc4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- community.mybboard.net/showthread.phpnvdPatch
- kapda.ir/advisory-295.htmlnvdExploitPatchVendor Advisory
- myimei.com/security/2006-03-10/mybb104redirectfunctionheaderinjection.htmlnvdExploit
- www.securityfocus.com/bid/17097nvdExploit
- www.securityfocus.com/archive/1/427747/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25267nvd
News mentions
0No linked articles in our index yet.