CVE-2004-0294
yabbforumsoftware yet another bulletin board: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days.
YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-203
- Published
- Modified
- Record from
- the NVD, synced
Affected
- yabbforumsoftware:yet_another_bulletin_board