{"id":"CVE-2006-1272","aliases":["EUVD-2006-1276","GHSA-8cg4-3m84-3pwg"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02111,"percentile":0.8193,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-03-19T02:00:00Z","modified":"2026-06-16T22:22:20Z","products":[{"vendor":"mybulletinboard","product":"mybulletinboard"}],"references":[{"url":"http://www.osvdb.org/23935","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://kapda.ir/advisory-297.html","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://community.mybboard.net/showthread.php?tid=7368","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/17097","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/427746/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25263","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1272"},{"url":"https://github.com/advisories/GHSA-8cg4-3m84-3pwg"}],"sources":{"cve":[{"id":"CVE-2006-1272","description":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.","status":"published","published":"2006-03-19T02:00:00Z","modified":"2024-08-07T17:03:28.912Z","updated_at":"2026-11-02T14:33:51.835276Z"}],"euvd":[{"id":"EUVD-2006-1276","description":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.","status":"published","published":"2006-03-19T02:00:00Z","modified":"2024-08-07T17:03:28Z","updated_at":"2026-11-03T01:16:05.818529Z"}],"ghsa":[{"id":"GHSA-8cg4-3m84-3pwg","title":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.","status":"published","published":"2022-05-01T06:47:38Z","modified":"2023-01-31T05:00:50Z","updated_at":"2026-11-02T14:47:56.116667Z"}],"nvd":[{"id":"CVE-2006-1272","description":"Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) aim, (2) yahoo, (3) msn, or (4) website field.","status":"published","published":"2006-03-19T02:02:00Z","modified":"2026-06-16T22:22:20.857Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:01.776256Z"}]}}