CVE-2002-0955: High severity Yabb Yabb vulnerability
Published Aug 31, 2002
·Updated
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.
Affected Software
1 affected component
Yabb Yabb=1_gold_sp_1
Event History
Aug 31, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0955?
CVE-2002-0955 has a moderate severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2002-0955?
To fix CVE-2002-0955, upgrade to a patched version of YaBB that filters the 'num' parameter properly.
3
Who is affected by CVE-2002-0955?
CVE-2002-0955 affects users of YaBB 1 Gold SP1 and earlier versions.
4
What type of vulnerability is CVE-2002-0955?
CVE-2002-0955 is a cross-site scripting (XSS) vulnerability.
5
What can attackers do with CVE-2002-0955?
Attackers can execute arbitrary scripts on behalf of other users through the exploitation of CVE-2002-0955.