CVE:CVE-2006-0495
CNNVD:CNNVD-200601-380
MyBB(也称为MyBulletinBoard)1.02的 usercp2.php中的"将线程添加到收藏功能"内存在跨站脚本攻击(XSS)漏洞，远程攻击者通过HTTP引用站点标题($url变量)注入任意Web脚本或HTML。
solution:Upgrade mybulletinboard mybulletinboard to a higher version than 1.0.2,and avoid the version 1.0.2
solution:Upgrade noah_medling rcblog to a higher version than 1.03,and avoid the version 1.03