EUVD-2002-0944

Malware in sbrugna...

CVE-2002-0955

CVE-2002-0955 describes a cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier. An attacker can supply a malicious script via the num parameter, which is not filtered in the resulting error message, allowing the script to run in the context o...