Description

Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "usernames via AJAX."

Remediation

References

CVE-2011-5132

Related Vulnerabilities

PHP Other Vulnerability (CVE-2015-0232)

WebLogic CVE-2022-21262 Vulnerability (CVE-2022-21262)

phpMyFAQ CVE-2007-1032 Vulnerability (CVE-2007-1032)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3193)

Apache Traffic Server CVE-2014-3525 Vulnerability (CVE-2014-3525)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-5132