Vulnerability in Yabb

CVE-2004-2140

CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable.

EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.

Affected products

  • Yabb — versions 1_gold_-_sp_1.3, 1_gold_-_sp_1.3.1
  • N/a — versions n/a

References