{"id":"CVE-2006-3761","aliases":["EUVD-2006-3755","GHSA-p5gj-3gm4-45m5"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...","description":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java\u0026#115;cript\".","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02573,"percentile":0.85281,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2006-07-21T00:00:00Z","modified":"2026-06-16T22:27:45Z","products":[{"vendor":"mybulletinboard","product":"mybulletinboard"}],"references":[{"url":"http://www.osvdb.org/26808","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27444","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/438588/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18702","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch"]},{"url":"http://community.mybboard.net/showthread.php?tid=10115","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.mybboard.com/archive.php?nid=15","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://myimei.com/security/2006-06-22/mybb-114-function_postphpxss-attack-in-url-tag.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://securityreason.com/securityalert/1257","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://secunia.com/advisories/20873","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3761"},{"url":"https://github.com/advisories/GHSA-p5gj-3gm4-45m5"}],"sources":{"cve":[{"id":"CVE-2006-3761","description":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java\u0026#115;cript\".","status":"published","published":"2006-07-21T00:00:00Z","modified":"2024-08-07T18:39:54.066Z","updated_at":"2026-11-02T14:33:49.62488Z"}],"euvd":[{"id":"EUVD-2006-3755","description":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java\u0026#115;cript\".","status":"published","published":"2006-07-21T00:00:00Z","modified":"2024-08-07T18:39:54Z","updated_at":"2026-11-03T01:15:54.992578Z"}],"ghsa":[{"id":"GHSA-p5gj-3gm4-45m5","title":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...","description":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java\u0026#115;cript\".","status":"published","published":"2022-05-01T07:12:14Z","modified":"2023-01-31T05:01:54Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:48:09.208669Z"}],"nvd":[{"id":"CVE-2006-3761","description":"Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using \"java\u0026#115;cript\".","status":"published","published":"2006-07-21T14:03:00Z","modified":"2026-06-16T22:27:45.543Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:05.130518Z"}]}}