medium4.3Public exploit code
CVE-2004-1827
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the backgroun…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities2004-03-15 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Machines | Simple Machines Smf | Version 1.0_b |
| Yabb | Yabb | Versions 1.5.1, 1_gold_-_sp_1.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107936800226430&w=2
- http://marc.info/?l=bugtraq&m=107948064923981&w=2
- http://secunia.com/advisories/11128
- http://securitytracker.com/id?1009427
- http://www.securityfocus.com/bid/9873
- http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15488
- http://marc.info/?l=bugtraq&m=107936800226430&w=2
- http://marc.info/?l=bugtraq&m=107948064923981&w=2
- http://secunia.com/advisories/11128
- http://securitytracker.com/id?1009427
- http://www.securityfocus.com/bid/9873
- http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15488