Security Advisory
CVE-2002-0117
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.