CVE-2003-1277

Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as other users and…

published November 16, 2005

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into (1) news_icon of news_template.php, and (2) threadid and subject of index.html

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01297 · 70.0th percentile
Published
2005-11-16T07:37Z
EPSS history
Timeline
  • 16 NOV 07:37Z
    Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as other users and…
    cvelistv5