Lucene search
MitreCVE-2003-1277HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1277
2005-11-1607:37:00
mitre
web.nvd.nist.gov
30
cve
2003
1277
cross-site scripting
xss vulnerabilities
yabb
bulletin board
remote attackers
arbitrary script
authentication information
cookies
html
script
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
High
EPSS
0.005
Percentile
77.3%
Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into (1) news_icon of news_template.php, and (2) threadid and subject of index.html
Affected configurations
Node
yabbyabbMatch1.5.0
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
High
EPSS
0.005
Percentile
77.3%
Related for CVE-2003-1277