yabb yabb 2000-09-11 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in YaBB search.pl CGI script allows remote malicious users to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.

Yabb Yabb 2000-09-11

1 EDB exploit

Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and previous versions allows remote malicious users to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

Yabb Yabb 0.01 Release Yabb Yabb 2000-09-01 Yabb Yabb 2000-09-11 Yabb Yabb 0.01 Sp1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.

Yabb Yabb 1 Gold - Sp 1.3.1 Yabb Yabb 1 Gold - Sp 1.3.2 Yabb Yabb 1 Gold - Sp 1.2 Yabb Yabb 1 Gold - Sp 1.3 Yabb Yabb 1.41 Yabb Yabb 1 Gold - Sp 1 Yabb Yabb 2000-09-11 Yabb Yabb 1.40 Yabb Yabb 1 Gold Release Yabb Yabb 2000-09-01

Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.

Yabb Yabb 1 Gold - Sp 1.2 Yabb Yabb 1 Gold - Sp 1.3 Yabb Yabb 1.41 Yabb Yabb 1 Gold - Sp 1 Yabb Yabb 2000-09-11 Yabb Yabb 1.40 Yabb Yabb 1 Gold Release Yabb Yabb 2000-09-01 Yabb Yabb 1 Gold - Sp 1.3.1 Yabb Yabb 1 Gold - Sp 1.3.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook