CVE Vulnerabilities

CVE-2004-1965

Published: Apr 25, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.

Affected Software

Name Vendor Start Version End Version
Openbb Openbb 1.0.0_beta1 1.0.0_beta1
Openbb Openbb 1.0.0_rc1 1.0.0_rc1
Openbb Openbb 1.0.0_rc2 1.0.0_rc2
Openbb Openbb 1.0.0_rc3 1.0.0_rc3
Openbb Openbb 1.0.5 1.0.5
Openbb Openbb 1.0.6 1.0.6
Openbb Openbb 1.0.8 1.0.8

References