CVE-2004-1827 Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow....
MediumCVSS 4.3
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple machines smf | = 1.0_b | No fix listed |
| yabb | = 1.5.1 | No fix listed |
| yabb | = 1_gold_-_sp_1.3 | No fix listed |
References
- 20040314 YaBB/YaBBse Cross Site Scripting Vulnerability mailing-list
- 20040316 RE: YaBB/YaBBse Cross Site Scripting Vulnerability mailing-list
- 11128 exploit patch third-party-advisory vendor-advisory
- 1009427 vdb-entry
- 9873 patch vdb-entry vendor-advisory
- www.yabbforum.com
- yabb-glow-shadow-xss(15488) vdb-entry