CVE:CVE-2005-4426
CNNVD:CNNVD-200512-430
Interpretation conflict in YaBB before 2.1中存在解析冲突，远程认证用户可通过带有GIF文件扩展名的文件内的HTML注入任意Web脚本或HTML。
solution:Upgrade yabb yabb to a higher version than 1.40,1.41,1_gold_-_sp_1,1_gold_-_sp_1.2,1_gold_-_sp_1.3,1_gold_-_sp_1.3.1,1_gold_-_sp_1.3.2,1_gold_-_sp_1.4,1_gold_release,2.0,2.0_rc1,2.0_rc2,and avoid the version 1.40,1.41,1_gold_-_sp_1,1_gold_-_sp_1.2,1_gold_-_sp_1.3,1_gold_-_sp_1.3.1,1_gold_-_sp_1.3.2,1_gold_-_sp_1.4,1_gold_release,2.0,2.0_rc1,2.0_rc2