Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
yabb yabb 1 gold - sp 1.2 vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2005-4426
Interpretation conflict in YaBB prior to 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-331...
Yabb Yabb 2.0 Rc2
Yabb Yabb 2.0 Rc1
Yabb Yabb 1.40
Yabb Yabb 1 Gold - Sp 1
Yabb Yabb 1 Gold - Sp 1.3.2
Yabb Yabb 1 Gold - Sp 1.3
Yabb Yabb 1 Gold - Sp 1.4
Yabb Yabb 1 Gold - Sp 1.2
Yabb Yabb 1.41
Yabb Yabb 1 Gold Release
Yabb Yabb 2.0
Yabb Yabb 1 Gold - Sp 1.3.1
445
VMScore
CVE-2004-1982
Post.pl in YaBB 1 Gold SP 1.2 allows remote malicious users to modify records in the board's .txt file via carriage return characters in the subject field.
Yabb Yabb 1 Gold - Sp 1
Yabb Yabb 1 Gold - Sp 1.2
890
VMScore
CVE-2004-2403
Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.
Yabb Yabb 2000-09-11
Yabb Yabb 1.40
Yabb Yabb 1 Gold - Sp 1
Yabb Yabb 1 Gold - Sp 1.3.2
Yabb Yabb 1 Gold - Sp 1.3
Yabb Yabb 2000-09-01
Yabb Yabb 1 Gold - Sp 1.2
Yabb Yabb 1.41
Yabb Yabb 1 Gold Release
Yabb Yabb 1 Gold - Sp 1.3.1
383
VMScore
CVE-2004-2402
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote malicious users to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.
Yabb Yabb 2000-09-11
Yabb Yabb 1.40
Yabb Yabb 1 Gold - Sp 1
Yabb Yabb 1 Gold - Sp 1.3.2
Yabb Yabb 1 Gold - Sp 1.3
Yabb Yabb 2000-09-01
Yabb Yabb 1 Gold - Sp 1.2
Yabb Yabb 1.41
Yabb Yabb 1 Gold Release
Yabb Yabb 1 Gold - Sp 1.3.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5841
file upload
man-in-the-middle
arbitrary
CVE-2024-27801
CVE-2024-28020
CVE-2024-30080
CVE-2024-30069
CVE-2024-5843
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started