CVE-2005-0741: XSS

Published Mar 8, 2005

Updated

Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.

Affected Software

1 affected component

Yabb Yabb=2.0_rc1

Remediation

Patch Available

http://www.securityfocus.com/bid/12756

Event History

Mar 8, 2005

CVE Published

05:00 AM

Mar 13, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0741?

CVE-2005-0741 has a moderate severity level due to its cross-site scripting vulnerability which can allow attackers to inject malicious scripts.

How do I fix CVE-2005-0741?

To fix CVE-2005-0741, upgrade to a patched version of YaBB or validate and sanitize the username input to prevent script injection.

What software is affected by CVE-2005-0741?

CVE-2005-0741 specifically affects YaBB version 2.0 RC1.

What kind of attack can be executed due to CVE-2005-0741?

CVE-2005-0741 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.

Who discovered CVE-2005-0741?

CVE-2005-0741 was publicly disclosed in 2005, although the specific individual or organization responsible for the discovery is not detailed in the vulnerability records.