PT-2005-2006 · Unknown · Yet Another Forum.Net

Maty Siman · Published 2005-04-05 · Updated 2016-10-18 · CVE-2005-0982

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yet Another Forum.net version 0.9.9

Description The issue allows remote attackers to inject arbitrary web script or HTML via the name, location, or Subject field, which can lead to cross-site scripting (XSS) attacks. XSS is a type of attack where an attacker injects malicious scripts into a website, which can then be executed by the user's browser, potentially leading to unauthorized actions or data theft.

Recommendations For Yet Another Forum.net version 0.9.9, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting user input in the name, location, and Subject fields to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0982

Affected Products

Yet Another Forum.Net

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0982 · Security Note
• http://marc.info/?l=bugtraq&m=111247338301262&w=2 · Note
• http://securitytracker.com/id?1013632 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0982 · Note