Yabb Security Vulnerabilities and Issues — Yabb CVE List

Lucene search

YabbYabb

4 matches found

CVE•added 2005/06/30 4:0 a.m.•51 views

CVE-2004-2139

Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl.

7.5CVSS7.5AI score0.00954EPSS

CVE•added 2005/06/28 4:0 a.m.•50 views

CVE-2002-1846

Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a pro...

5CVSS7.2AI score0.00336EPSS

CVE•added 2005/06/30 4:0 a.m.•49 views

CVE-2004-2140

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable.

5CVSS6.9AI score0.00336EPSS

CVE•added 2005/06/28 4:0 a.m.•44 views

CVE-2002-1845

Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter.

4.3CVSS6.2AI score0.0052EPSS