Yabb Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

1 Gold - Sp 1.3.1	6
1.5.5	6
2000-09-01	6
1.5.1	6
1.5.0	4

Remediation

Official Fix	16
Temporary Fix	0
Workaround	0
Unavailable	4
Not Defined	14

Exploitability

High	2
Functional	0
Proof-of-Concept	6
Unproven	2
Not Defined	24

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	34

Authentication

Not Defined	0
High	0
Low	4
None	30

User Interaction

Not Defined	0
Required	14
None	20

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	10
≤6	8
≤7	10
≤8	2
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	10
≤6	16
≤7	4
≤8	0
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	10
≤6	8
≤7	10
≤8	2
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	18
<5k	16
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	34
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (28): 0.01 Release, 0.01 Sp1, 0.8, 1 Gold - Sp 1, 1 Gold - Sp 1.2, 1 Gold - Sp 1.3, 1 Gold - Sp 1.3.1, 1 Gold - Sp 1.3.2, 1 Gold - Sp 1.4, 1 Gold Release, 1 Gold Sp 1, 1.4.1, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.5b, 1.5.5c, 1.40, 1.41, 2.0, 2.0 Rc1, 2.0 Rc2, 2.1, 2000-09-01, 2000-09-11

Software Type: Forum Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
06/21/2007	4.2	3.7	YaBB path traversal	$5k-$25k	$0-$5k	Unproven	Unavailable	0.00	CVE-2007-3295
06/12/2007	9.8	9.8	YaBB profile.pl privileges management	$0-$5k	$0-$5k	Not Defined	Not Defined	0.06	CVE-2007-3208
06/12/2007	10.0	8.7	YaBB register.pl memory corruption	$0-$5k	$0-$5k	Unproven	Official Fix	0.05	CVE-2007-3208
08/16/2006	6.3	6.1	YaBB index.php cross site scripting	$0-$5k	$0-$5k	High	Unavailable	0.00	CVE-2006-4157
06/28/2006	7.3	6.9	YaBB profile.php sql injection	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.03	CVE-2006-3275
12/20/2005	3.5	3.4	YaBB cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2005-4426
07/18/2005	5.3	5.3	Yabb ssi_examples.php information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2005-2296
05/02/2005	4.3	4.1	YaBB cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2005-0785
03/08/2005	4.3	4.1	YaBB yabb.pl cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2005-0741
12/31/2004	4.3	4.1	YaBB cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2004-2140