MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-1840 - Vulnerability Database

MyBB

MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-1840

Medium

Reference: CVE-2014-1840

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-1840

Title: MyBB Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action which is not properly handled in a forced SQL error message.