EUVD-2004-2131

Malware in sbrugna...

EUVD-2004-2394

Malware in sbrugna...

EUVD-2004-1820

Malware in sbrugna...

YaBB 1 Gold - SP 1 YaBB.pl Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6272/info A cross-site scripting vulnerability has been reported in the YaBB forum. This vulnerability is due to insufficient sanitization of URI parameters in some scripts. As a result, it is possible for a remote attack...

CVE-2004-2402

Cross-site scripting XSS vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect...

CVE-2004-2403

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...

CVE-2004-2403

CVE-2004-2403 describes a CSRF vulnerability in YaBB 1 GOLD SP 1.3.2. An attacker can cause the administrative user to perform unauthorized actions by enticing the admin to click a crafted link or view an IMG tag that targets YaBB.pl with specific action, id, and moda parameters. The vulnerabilit...

CVE-2004-2403: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...

CVE-2004-2140

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable...

CVE-2004-2139

CVE-2004-2139 affects YaBB 1 Gold prior to 1.3.2. The vulnerability is described as an arbitrary code execution via the settings.pl path in Adminedit.pl, indicating a remote attacker could leverage this in the YaBB 1 Gold web forum software. Affected component/file: YaBB 1 Gold

CVE-2004-2140

CVE-2004-2140 describes a CRLF injection in YaBB 1 Gold before 1.3.2, where an attacker can modify text file contents via the subject parameter. Affected product: YaBB 1 Gold web forum software (pre-1.3.2). Root cause: input handling allows CRLF injection in the subject field, enabling unauthoriz...

CVE-2004-2140: Undefined Security Weakness

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable...

CVE-2004-2139: Undefined Security Weakness

Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl...

CVE-2004-1827

CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...

CVE-2004-1982

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

CVE-2004-1827: Undefined Security Weakness

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

CVE-2004-1982: Undefined Security Weakness

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field...

CVE-2004-2403

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...