CVE-2004-0344: Yabb

Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.

Affected products

• Yabb Yabb: version 1.5.5 only; version 1.5.5b only

Published 2004-11-23. Last modified 2026-06-16.