CVE:CVE-2004-2402
CNNVD:CNNVD-200412-655
YaBB 1 GOLD SP 1.3.2版本的YaBB.pl存在跨站脚本(XSS)漏洞。远程攻击者可以借助参数的十六进制编码来注入任意web脚本或HTML。
solution:Upgrade yabb yabb to a higher version than 1.40,1.41,1_gold_-_sp_1,1_gold_-_sp_1.2,1_gold_-_sp_1.3,1_gold_-_sp_1.3.1,1_gold_-_sp_1.3.2,1_gold_release,2000-09-01,2000-09-11,and avoid the version 1.40,1.41,1_gold_-_sp_1,1_gold_-_sp_1.2,1_gold_-_sp_1.3,1_gold_-_sp_1.3.1,1_gold_-_sp_1.3.2,1_gold_release,2000-09-01,2000-09-11