ORIGINAL ADVISORY:

http://kapda.ir/page-advisory.html

http://myimei.com/security/2006-06-22/mybb-114-function_postphpxss-attac
k-in-url-tag.html

???????Summary?????-

Software: MyBB

Sowtware?s Web Site: http://www.mybboard.com

Versions: 1.1.3

Class: Remote

Status: Patched

Exploit: Available

Discovered by: imei addmimistrator

Risk Level:low-medium

??????Description?????

Mybb has a security bug that allows hackers run unwanted scripts into client?s browser that well known as XSS cross site scripting attack.

READ ORIGINAL ADVISORY FOR MORE DETAIL

[ reply ]