CVE-2004-2402

Published: Dec 31, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.

Affected (10)

Products: Yabb: Yabb

Yabb

1 product

Yabb

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Yabb Yabb	Version 1.40
Yabb Yabb	Version 1.41
Yabb Yabb	Version 1_gold_-_sp_1.2
Yabb Yabb	Version 1_gold_-_sp_1.3.1
Yabb Yabb	Version 1_gold_-_sp_1.3.2
Yabb Yabb	Version 1_gold_-_sp_1.3
Yabb Yabb	Version 1_gold_-_sp_1
Yabb Yabb	Version 1_gold_release
Yabb Yabb	Version 2000-09-01
Yabb Yabb	Version 2000-09-11