Vulnerability index

Browse CVEs

8 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Yabb MEDIUM 6.5
CVE-2007-3295

Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users to execute arbitrary Perl co…

Mitigation only
Fix from $1,600 2007-06-20
Yabb MEDIUM 6.8
CVE-2006-4157

Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or …

No fix yet
Fix from $1,600 2006-08-16
Yabb MEDIUM 5.0
CVE-2005-2296

YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path.

Mitigation only
Fix from $1,600 2005-07-18
Yabb HIGH 10.0
CVE-2004-2403

Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative…

No fix yet
Fix from $1,950 2004-12-31
Yabb MEDIUM 5.1
CVE-2003-0275

SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote we…

Mitigation only
Fix from $1,600 2003-06-16
Yabb MEDIUM 5.0
CVE-2002-1846

Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which al…

Mitigation only
Fix from $1,600 2002-12-31
Yabb HIGH 7.5
CVE-2002-0955EPSS 9%

Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitr…

No fix yet
Fix from $1,950 2002-10-04
Yabb HIGH 7.5
CVE-2000-1176EPSS 6%

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "cats…

No fix yet
Fix from $1,950 2001-01-09