YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

Bugtraq ID:	11764
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 26 2004 12:00AM
Updated:	Nov 26 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	YaBB YaBB 9.11.2000 YaBB YaBB 9.1.2000 YaBB YaBB 1.41 YaBB YaBB 1.40 YaBB YaBB 1 Gold Release - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 YaBB YaBB 1 Gold - SP 1.3.2 YaBB YaBB 1 Gold - SP 1.3.1 YaBB YaBB 1 Gold - SP 1.3 YaBB YaBB 1 Gold - SP 1.2 YaBB YaBB 1 Gold - SP 1 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.18 - Apache Apache 1.3.17 - Apache Apache 1.3.17 - Microsoft IIS 5.0 - Microsoft IIS 4.0 - Omnicron OmniHTTPD 2.4 Pro
Not Vulnerable:	YaBB YaBB 1 Gold - SP 1.4

YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

YaBB is reported prone to a JavaScript injection vulnerability. It is reported that the BBCode 'shadow' tag is not sufficiently sanitized of malicious script content.

An attacker that has an account on the affected bulletin board may exploit this vulnerability to inject arbitrary JavaScript code into forum posts through the 'shadow' tag.

YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

No exploit is required.

YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

Solution:
The vendor has released an update to address this vulnerability:


YaBB YaBB 1 Gold Release

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB YaBB 1 Gold - SP 1.3.2

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB YaBB 1 Gold - SP 1.3

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB YaBB 1 Gold - SP 1.3.1

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB YaBB 1 Gold - SP 1

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB YaBB 1 Gold - SP 1.2

• YaBB YaBB 1 Gold - SP 1.4
  http://www.yabbforum.com/downloads.php

YaBB Shadow BBCode Tag JavaScript Injection Vulnerability

References:

• 1 Gold - SP 1.4 (YaBB)
  
• YaBB Homepage (YaBB)