Description
Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL error message.
Remediation
References
Related Vulnerabilities
OpenSSL Cryptographic Issues Vulnerability (CVE-2011-1945)
WordPress Plugin College publisher Import Arbitrary File Upload (0.1)
WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)
Jboss EAP CVE-2017-12189 Vulnerability (CVE-2017-12189)
WordPress Plugin zeList Directory Cross-Site Scripting (0.5.11.07)