CVE:CVE-2002-1845
CNNVD:CNNVD-200212-163
Yet Another Bulletin Board (YaBB) 1.40和1.41版本的index.php存在跨站脚本（XSS）漏洞。远程攻击者借助password (passwrd)参数插入任意web脚本或者HTML。
solution:Upgrade yabb yabb to a higher version than 1.40,1.41,and avoid the version 1.40,1.41