ORIGINAL ADVISORY:
http://myimei.com/security/2006-03-09/mybb104memberphpxss-after-login.html 
http://kapda.ir/advisory-296.html 

=97=97=96Summary=97=97=96
Software: MyBB
Sowtware=92s Web Site: http://www.mybboard.com 
Versions: 1.0.4
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Available
Discovered by: imei addmimistrator
Risk Level: high