Unscored CVE-2004-2403 EUVD-2004-2394GHSA-cg5v-fvrh-4wvf

Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the admi…

Published Aug 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.

References

12593 third-party-advisory
11214 vdb-entry
yabb-administrative-bypass(17453) vdb-entry
20040916 RE: www.proboards.com / YaBB XSS Vuln mailing-list
10243 vdb-entry