Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2002 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and previous versions allows remote malicious users to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yabb yabb 1_gold_sp_1

source: wwwsecurityfocuscom/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to execute If such a URL is sent to a YaBB user, upon a ...

NVD-CWE-Other http://www.securityfocus.com/bid/5078 http://www.iss.net/security_center/static/9408.php http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21573/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0955

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect