Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerabilities in Yet Another Bulletin Board (YaBB) 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into (1) news_icon of news_template.php, and (2) threadid and subject of index.html
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yet Another Bulletin Board (YaBB）跨站脚本（XSS）漏洞
Vulnerability Description
Yet Another Bulletin Board (YaBB) 1.5.0版本存在跨站脚本（XSS）漏洞。远程攻击者像其他用户一样借助cookies通过注入任意HTML或者脚本到(1)news_template.php的news_icon和(2)threadid 和index.html的subject执行任意脚本且可能盗取认证信息。
CVSS Information
N/A
Vulnerability Type
N/A