Vulnerabilities > Yabb

DATE CVE VULNERABILITY TITLE RISK
2002-10-04 CVE-2002-0955 Cross-Site Scripting vulnerability in Yabb 1Goldsp1
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.
network
low complexity
yabb
7.5
2002-03-25 CVE-2002-0117 Unspecified vulnerability in Yabb
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
network
low complexity
yabb
7.5
2001-01-09 CVE-2000-1176 Unspecified vulnerability in Yabb 20000911
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..
network
low complexity
yabb
7.5
2000-11-14 CVE-2000-0853 Unspecified vulnerability in Yabb 20000901
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a ..
network
low complexity
yabb
5.0