Microsoft · Internet Explorer · CVE-2006-4449
**Name of the Vulnerable Software and Affected Versions**
MyBB versions 1.1.7 and possibly other versions
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via a GIF image containing URL-encoded Javascript. This is rendered by Internet Explorer.
**Recommendations**
For MyBB version 1.1.7, update to a version that fixes this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.