Unscored CVE-2004-2402 EUVD-2004-2393GHSA-gf92-54hq-393h

Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML …

Published Aug 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.

References

12593 third-party-advisory
10242 vdb-entry
20040916 RE: www.proboards.com / YaBB XSS Vuln mailing-list
yabb-board-xss(17452) vdb-entry
11215 vdb-entry