VULNERABILITY INTELLIGENCE

CVE-2006-1282

CVSS score4.3 MEDIUM
EPSS probability1.40%
CISA KEVNot currently listed
Published2006-03-19
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cross-site scripting (XSS), poison caches, or hijack pages via CRLF (%0A%0D) sequences in the Referrer HTTP header field, possibly when redirecting to other web pages.

Primary references