Lucene search
HistoryAug 16, 2006 - 10:04 p.m.
CVE-2006-4157
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.007
Percentile
80.5%
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
Affected configurations
Node
yabbyabbMatch1.5.1second_edition
ORyabbyabbMatch1.5.2second_edition
ORyabbyabbMatch1.5.4second_edition
ORyabbyabbMatch1.5.5second_edition
ORyabbyabbMatch1.5.5bsecond_edition
| Vendor | Product | Version | CPE |
|---|---|---|---|
| yabb | yabb | 1.5.1 | cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:* |
| yabb | yabb | 1.5.2 | cpe:2.3:a:yabb:yabb:1.5.2:*:second_edition:*:*:*:*:* |
| yabb | yabb | 1.5.4 | cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:* |
| yabb | yabb | 1.5.5 | cpe:2.3:a:yabb:yabb:1.5.5:*:second_edition:*:*:*:*:* |
| yabb | yabb | 1.5.5b | cpe:2.3:a:yabb:yabb:1.5.5b:*:second_edition:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-4157
2006-08-16 21:00:00
exploitdb
exploitdb
YaBBSE 1.x - 'index.php' Cross-Site Scripting
2006-08-10 00:00:00
cve
cve
CVE-2006-4157
2006-08-16 22:04:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.007
Percentile
80.5%
Related for NVD:CVE-2006-4157