CVE-2006-4449

MEDIUM · CVSS 5.1 EPSS 2.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-08-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-4449

Severity

MEDIUM

CVSS

5.1

EPSS

2.26%

Java

Original NVD Description

Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer.