Vulnerability Details : CVE-2004-2402
Potential exploit
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter. NOTE: some sources say that the board parameter is affected, but this is incorrect.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2004-2402
- cpe:2.3:a:yabb:yabb:2000-09-01:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:2000-09-11:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.2:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:yabb:yabb:1_gold_release:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-2402
0.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 64 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-2402
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
References for CVE-2004-2402
-
http://secunia.com/advisories/12593
About Secunia Research | FlexeraExploit;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/17452
-
http://www.osvdb.org/10242
-
http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html
Exploit
-
http://www.securityfocus.com/bid/11215
Exploit
Jump to