PT-2006-5249 · Microsoft+1 · Internet Explorer+1

Redworm

·

CVE-2006-4449

·

Publicado

2006-08-30

·

Atualizado

2018-10-17

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions MyBB versions 1.1.7 and possibly other versions
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a GIF image containing URL-encoded Javascript. This is rendered by Internet Explorer.
Recommendations For MyBB version 1.1.7, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-4449

Produtos afetados

Internet Explorer
Mybb