Vulnerabilities > CVE-2005-0785 - Remote UsersRecentPosts Cross-Site Scripting vulnerability in Yabb 2.0Rc1

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
yabb
nessus
NVD
Published: 2005-05-02
Updated: 2017-07-11

Summary

Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Vulnerable Configurations

Part Description Count
Application
Yabb
1

Nessus

NASL familyCGI abuses : XSS
NASL idYABB_USERSRECENTPOSTS_XSS.NASL
descriptionThe installed version of YaBB (Yet Another Bulletin Board) on the remote host suffers from a remote cross-site scripting flaw due to its failure to properly sanitize input passed via the
last seen2020-06-01
modified2020-06-02
plugin id17305
published2005-03-10
reporterThis script is Copyright (C) 2005-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/17305
titleYaBB YaBB.pl usersrecentposts Action username Parameter XSS

References