Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1969
openbb
1.0.6
remote execution
arbitrary script
avatar upload
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.5%
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.
Affected configurations
Node
openbbopenbbMatch1.0.0_beta1
ORopenbbopenbbMatch1.0.0_rc1
ORopenbbopenbbMatch1.0.0_rc2
ORopenbbopenbbMatch1.0.0_rc3
ORopenbbopenbbMatch1.0.5
ORopenbbopenbbMatch1.0.6
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.5%
Related for CVE-2004-1969