20040314 YaBB/YaBBse Cross Site Scripting Vulnerabilitymailing list
http://marc.info/?l=bugtraq&m=107936800226430&w=2 CVE-2004-1827
YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2004-1827 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBYABB SE 1.5.1 - Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby Cheng Peng SuNot analyzed1 file
References
920040316 RE: YaBB/YaBBse Cross Site Scripting Vulnerabilitymailing list
http://marc.info/?l=bugtraq&m=107948064923981&w=2 11128Third-party advisory
http://secunia.com/advisories/11128 1009427vdb entry
http://securitytracker.com/id?1009427 9873vdb entry
http://www.securityfocus.com/bid/9873 yabbforum.comConfirmation
http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233 yabbforum.com
http://www.yabbforum.com/community/YaBB.pl?board=general;action=display;num=1093133233 yabb-glow-shadow-xss(15488)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15488 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-1827