CVE-2002-1845 Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) param...
MediumCVSS 4.3
EPSS 3.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yabb | = 1.40 | No fix listed |
| yabb | = 1.41 | No fix listed |
References
- 20021018 New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums mailing-list
- yabb-index-xss(10406) vdb-entry
- 6004 exploit vdb-entry