cpe:2.3:a:yabb:yabb:1.5.2:*:second_edition:*:*:*:*:*
YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability
Max CVSS
9.8
EPSS Score
0.39%
Published
2020-02-11
Updated
2020-02-14
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
Max CVSS
6.8
EPSS Score
0.71%
Published
2006-08-16
Updated
2018-10-17
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action.
Max CVSS
7.5
EPSS Score
0.65%
Published
2006-06-28
Updated
2017-07-20
SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.
Max CVSS
5.1
EPSS Score
0.25%
Published
2003-06-16
Updated
2016-10-18
4 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!