Lucene search
K

CVE-2004-1965

🗓️ 10 May 2005 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 92 Views🌐 WEB

Multiple XSS vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2004-1965
10 May 200504:00
cvelist
Exploit DB
OpenBB < 1.0.6 - Multiple Vulnerabilities
24 Apr 200400:00
exploitdb
EUVD
EUVD-2004-1957
7 Oct 202500:30
euvd
exploitpack
OpenBB 1.0.6 - Multiple Vulnerabilities
24 Apr 200400:00
exploitpack
Nuclei
Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS
4 Jun 202603:48
nuclei
NVD
CVE-2004-1965
25 Apr 200404:00
nvd
NVD
Node
openbbopenbbMatch1.0.0_beta1
OR
openbbopenbbMatch1.0.0_rc1
OR
openbbopenbbMatch1.0.0_rc2
OR
openbbopenbbMatch1.0.0_rc3
OR
openbbopenbbMatch1.0.5
OR
openbbopenbbMatch1.0.6
OR
openbbopenbbMatch1.0.8
ParameterPositionPathDescriptionCWE
redirectquery parammember.php?action=login&redirect=[XSS]XSS via redirect parameter in member login
toquery parammyhome.php?action=newmsg&to=blah[XSS]XSS via to parameter in myhome.php New Message
TIDquery parampost.php?action=mail&TID=1[XSS]XSS via TID parameter in post mail
redirectquery paramindex.php?redirect=[XSS]XSS via redirect parameter in index page
FIDquery paramboard.php?FID=1[SQL]SQL injection in FID parameter of board.php
sortorderquery parammember.php?action=list&page=1&sortorder=[SQL]SQL injection via sortorder in member list
perpagequery parammember.php?action=list&page=1&sortorder=username&perpage=[SQL]SQL injection via perpage in member list
resetidquery parammember.php?action=passwdsend&resetid=blah&id=2[SQL]SQL injection via resetid/id in password send
idquery parammember.php?action=passwdsend&resetid=blah&id=2[SQL]SQL injection via resetid/id in password send
forums[SQL]query paramsearch.php?&sortby=dateline&sort=DESC&q=open&forums%5B[SQL]%5DSQL injection via forums[SQL] in search
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Apr 2026 00:27Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.00265
92