Lucene search

[email protected]CVE-2004-1827

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1827

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-1827

cross-site scripting

xss

vulnerability

yabb 1 gold

yabb se 1.5.1 final

remote attackers

web script

glow

shadow tags

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.

Affected configurations

NVD

Node

simple_machinessimple_machines_smfMatch1.0_b

yabbyabbMatch1.5.1second_edition

yabbyabbMatch1_gold_-_sp_1.3

CPENameOperatorVersion
simple_machines:simple_machines_smfsimple machines simple machines smfeq1.0_b
yabb:yabbyabbeq1.5.1
yabb:yabbyabbeq1_gold_-_sp_1.3

CPE	Name	Operator	Version
simple_machines:simple_machines_smf	simple machines simple machines smf	eq	1.0_b
yabb:yabb	yabb	eq	1.5.1
yabb:yabb	yabb	eq	1_gold_-_sp_1.3

References

marc.info/?l=bugtraq&m=107936800226430&w=2

marc.info/?l=bugtraq&m=107948064923981&w=2

secunia.com/advisories/11128

securitytracker.com/id?1009427

www.securityfocus.com/bid/9873

www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233

exchange.xforce.ibmcloud.com/vulnerabilities/15488

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

Related for CVE-2004-1827

nvd2 cvelist1 cve1