Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2402
cve
2004
2402
yabb.pl
cross-site scripting
xss
vulnerability
web script
html
remote
nvd
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.5%
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.
Related
cvelist
cvelist
CVE-2004-2402
2005-08-17 04:00:00
openvas
openvas
YaBB 1 GOLD SP 1.3.2 Multiple Vulnerabilities
2005-11-03 00:00:00
nessus
nessus
YaBB 1 GOLD SP 1.3.2 Multiple Vulnerabilities
2004-09-21 00:00:00
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.012 Low
EPSS
Percentile
85.5%
Related for CVE-2004-2402