CVE-2002-0955 - Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message

Back Back to CVE browser

HIGH

Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message

Published Aug 31, 2002

7.5

HIGH

CVSS 2.0

EPSS 8.55%

Description

Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html
mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/9408.php
vdb-entryx_refsource_XFVendor Advisory
http://www.securityfocus.com/bid/5078
vdb-entryx_refsource_BIDExploitVendor Advisory

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html		mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/9408.php		vdb-entryx_refsource_XFVendor Advisory
http://www.securityfocus.com/bid/5078		vdb-entryx_refsource_BIDExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 31, 2002

Updated Aug 8, 2024

Reserved Aug 16, 2002

Link CVE-2002-0955

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2002-0955

Red Hat

Severity n/a

Public date n/a

Links CVE-2002-0955