Vulnerability in Yabb

CVE-2000-1176

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.

EPSS: 0.057 (92.2th percentile) — read the EPSS interpretation.

Affected products

  • Yabb — versions 2000-09-11
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)