CVE:CVE-2002-2296
CNNVD:CNNVD-200212-162
Yet Another Bulletin Board (YaBB) 1 Gold SP 1版本的YaBB.pl存在跨站脚本漏洞。远程攻击者借助num参数插入任意web脚本或者HTML。
solution:Upgrade yabb yabb to a higher version than 1_gold_-_sp_1,and avoid the version 1_gold_-_sp_1