CVE
- Id
- 10254
- CVE No.
- CVE-2004-1827
- Status
- Candidate
- Description
- Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
- Phase
- Assigned (20050504)
- Votes
- None (candidate not yet proposed)
- Comments