exploits , vulnerabilities , articles , YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

Title	YaBB Shadow BBCode Tag JavaScript Injection Vulnerability
Published	2004-11-26-12:00AM
Updated	2004-11-26-05:17PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	This vulnerability was announced by the vendor.
Vulnerable	YaBB YaBB 9.11.2000 YaBB YaBB 9.1.2000 YaBB YaBB 1.41 YaBB YaBB 1.40 YaBB YaBB 1 Gold Release Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a YaBB YaBB 1 Gold SP 1.3.2 YaBB YaBB 1 Gold SP 1.3.1 YaBB YaBB 1 Gold SP 1.3 YaBB YaBB 1 Gold SP 1.2 YaBB YaBB 1 Gold SP 1 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache for Windows 1.3.17 Apache Software Foundation Apache for Windows 1.3.18 Apache Software Foundation Apache for Windows 1.3.19 Apache Software Foundation Apache for Windows 1.3.20 Microsoft IIS 4.0 Microsoft IIS 5.0 Omnicron OmniHTTPD 2.4 Pro
Not Vulnerable	YaBB YaBB 1 Gold - SP 1.4
Code	No exploit is required.
TXT