Yabb · Yabb 1 Gold Sp · CVE-2004-1982
**Name of the Vulnerable Software and Affected Versions**
YaBB 1 Gold SP version 1.2
**Description**
The issue allows remote attackers to modify records in the board's .txt file by injecting carriage return characters in the `subject` field. This is related to the Post.pl file in the affected software.
**Recommendations**
For YaBB 1 Gold SP version 1.2, avoid using carriage return characters in the `subject` field until a fix is available. As a temporary workaround, consider validating and sanitizing user input in the `subject` field to prevent injection of malicious characters.