Skip to content

CVE-2005-0741 Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.

MediumCVSS 4.3 EPSS 1.4% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.

Affected products

ProductAffected versionsFixed in
yabb = 2.0_rc1 No fix listed

References

  • 1013420 vdb-entry vendor-advisory
  • 12756 exploit patch vdb-entry vendor-advisory