Vulnerability in Yabb

CVE-2005-0741

Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

Affected products

  • Yabb — versions 2.0_rc1
  • N/a — versions n/a

References

  • cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)