7.5

CVE-2002-0955

Exploit
Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yabb ≫ Yabb Version1_gold_sp_1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.55% 0.944
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html
http://www.iss.net/security_center/static/9408.php
Vendor Advisory
http://www.securityfocus.com/bid/5078
Vendor Advisory
Exploit