MyBB version 1.6.2 suffers from a stored cross site scripting vulnerability.
ebac2632393b8d0b78b1d9d0f0b46a78dded2852e45d084f72872dea5916c1f5MyBB Recent Topics Stored XSS Vulnerability
Version: MyBB 1.6.2
Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page
Found by: Xinapse
Site: http://www.iexploit.org
Risk: Medium/High
Description: By creating a thread with your XSS code as the title any user
with any level of privellages can cause XSS on the index.php main page.
For example: <script>alert('xss')</script>
Shouts: Semtex, Chronic, Bursihido, D0wngrade, George
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed