Browse CVEs

MEDIUM 6.5 CVE-2007-3295 Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users to execute arbitrary Perl co… Yabb Mitigation only Fix from $1,6002007-06-20 MEDIUM 6.8 CVE-2006-4157 Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or … Yabb No fix yet Fix from $1,6002006-08-16 MEDIUM 5.0 CVE-2005-2296 YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path. Yabb Mitigation only Fix from $1,6002005-07-18 HIGH 10.0 CVE-2004-2403 Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative… Yabb No fix yet Fix from $1,9502004-12-31 MEDIUM 5.1 CVE-2003-0275 SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote we… Yabb Mitigation only Fix from $1,6002003-06-16 MEDIUM 5.0 CVE-2002-1846 Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which al… Yabb Mitigation only Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-0955EPSS 9% Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitr… Yabb No fix yet Fix from $1,9502002-10-04 HIGH 7.5 CVE-2000-1176EPSS 6% Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "cats… Yabb No fix yet Fix from $1,9502001-01-09