Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-4157

Disclosure Date: August 16, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
0
0
Attacker Value
Unknown

CVE-2006-3275

Disclosure Date: June 28, 2006 (last updated October 04, 2023)
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action.
0
0
Attacker Value
Unknown

CVE-2004-2754

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
0
0
Attacker Value
Unknown

CVE-2003-0275

Disclosure Date: June 16, 2003 (last updated February 22, 2025)
SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
0
0