Unscored CVE-2012-2643 EUVD-2012-2629GHSA-pccj-j527-4r52

Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via…

Published Jul 7, 2012 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry.

References

JVN#03582364 third-party-advisory
JVNDB-2012-000068 third-party-advisory
http://www.kent-web.com/bbs/yybbs.html