Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

yabb yabb 1.40 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2002-1845
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote malicious users to inject arbitrary web script or HTML via the password (passwrd) parameter.
Yabb Yabb 1.40Yabb Yabb 1.41
5
CVSSv2
CVE-2002-1846
Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote malicious users to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submi...
Yabb Yabb 1.40Yabb Yabb 1.41
4
CVSSv2
CVE-2005-4426
Interpretation conflict in YaBB prior to 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-331...
Yabb Yabb 1 Gold - Sp 1Yabb Yabb 1 Gold - Sp 1.2Yabb Yabb 2.0 Rc1Yabb Yabb 1 Gold - Sp 1.3Yabb Yabb 1 Gold - Sp 1.3.1Yabb Yabb 1.40Yabb Yabb 1.41Yabb Yabb 1 Gold ReleaseYabb Yabb 2.0Yabb Yabb 1 Gold - Sp 1.3.2Yabb Yabb 1 Gold - Sp 1.4Yabb Yabb 2.0 Rc2
4.3
CVSSv2
CVE-2004-2402
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.
Yabb Yabb 1 Gold - Sp 1.3.1Yabb Yabb 1 Gold - Sp 1.3.2Yabb Yabb 1 Gold - Sp 1.2Yabb Yabb 1 Gold - Sp 1.3Yabb Yabb 1.41Yabb Yabb 1 Gold - Sp 1Yabb Yabb 2000-09-11Yabb Yabb 1.40Yabb Yabb 1 Gold ReleaseYabb Yabb 2000-09-01
10
CVSSv2
CVE-2004-2403
Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.
Yabb Yabb 1 Gold - Sp 1.2Yabb Yabb 1 Gold - Sp 1.3Yabb Yabb 1.41Yabb Yabb 1 Gold - Sp 1Yabb Yabb 2000-09-11Yabb Yabb 1.40Yabb Yabb 1 Gold ReleaseYabb Yabb 2000-09-01Yabb Yabb 1 Gold - Sp 1.3.1Yabb Yabb 1 Gold - Sp 1.3.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook