Skip to content

CVE-2004-1982

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file...

5.0 Medium

CVE-2004-1982 is a medium vulnerability (CVSS 5.0) in Yabb, published May 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

Exploit likelihood

1.46%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

Record: CVE-2004-1982
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

Record: CVE-2004-1982
Updated: 2026-11-02

EUVDEUVD-2004-1974 No score

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

Record: EUVD-2004-1974
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pqm2-r3mv-x23f No score

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file...

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.

Record: GHSA-pqm2-r3mv-x23f
Updated: 2026-11-02

Affected products

yabb

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References