CVE:CVE-2004-2140
CNNVD:CNNVD-200412-505
YaBB 1 Gold 1.3.2以前的版本存在CRLF注入漏洞。远程攻击者借助subject变量修改文本文件。
solution:Upgrade yabb yabb to a higher version than 1_gold_-_sp_1.3,1_gold_-_sp_1.3.1,and avoid the version 1_gold_-_sp_1.3,1_gold_-_sp_1.3.1