CVE-2006-2088

Vulnerability summary (CVE-2006-2088) : OpenBB (Devsyn Open Bulletin Board) 1.0.6 is affected by multiple cross-site scripting (XSS) flaws. The vulnerabilities occur in the web interface through user-supplied input: the FID parameter in board.php and the TID parameter in read.php. The issue is ex...

CVE-2006-2088

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

OpenBB XSS

The remote host seems to be running OpenBB, a forum management system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through the script 'board.php'. Using a specially crafted URL, an attacker can cause arbitrary code execution for third party...

OpenBB XSS and SQL injection flaws

The remote version of OpenBB is vulnerable to cross-site scripting attacks, and SQL injection flaws. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

OpenBB XSS

The remote host seems to be running OpenBB, a forum management system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced...

CVE-2005-2566

Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter to board.php or 2 UID parameter to member.php...

CVE-2005-2566

Open Bulletin Board (OpenBB) contains multiple SQL injection vulnerabilities in board.php (FID parameter) and member.php (UID parameter). The affected components are the OpenBB web application’s old board and member handlers, enabling remote attackers to execute arbitrary SQL commands. The CVE-20...

[EXPL] OpenBB CID SQL Injection (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-1830

Open Bulletin Board (OpenBB) 1.0.0 RC3 contains an authentication bypass vulnerability that lets remote attackers access modifier options by issuing a direct request to moderator.php with action and ismod parameters. The vulnerability path arises from insufficient access controls on moderator.php...

CVE-2002-1829

OpenBB (Open Bulletin Board) 1.0.0 RC3 has a cross-site scripting vulnerability in codeparse.php that allows remote attackers to inject arbitrary script via (1) myhome.php, (2) an onerror attribute in an IMG tag (variant of CVE-2002-0330), or (3) a glow tag. The issue stems from insufficient inpu...

CVE-2002-1830

Open Bulletin Board OpenBB 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters...

[SA15336] OpenBB Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: OpenBB Cross-Site Scripting and SQL Injection...

CVE-2005-1612

OpenBB (Open Bulletin Board) vulnerable to SQL injection in read.php via the TID parameter. Affected version: OpenBB 1.0.8. Risk includes remote command execution against the database with partial confidentiality/ integrity/ availability impact (CVSS v2 base 7.5). Other documents confirm XSS also...

CVE-2005-1613

OpenBB (Open Bulletin Board) <= 1.0.8 contains a cross-site scripting (XSS) vulnerability in member.php that allows an attacker to inject arbitrary script or HTML via the reverse parameter in a list action. This CVE, CVE-2005-1613, is documented across multiple sources (NVD, CVE list, and Open...

OpenBB < 1.0.9 Multiple Vulnerabilities

The remote host seems to be running OpenBB, a forum management system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, and SQL injection flaws. Using a specially crafted URL, an attacker may execute arbitrary commands against the remote SQL databa...

OpenBB 1.0.8 - Read.php SQL Injection

OpenBB 1.0.8 - Read.php SQL Injection source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

OpenBB 1.0.8 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

OpenBB 1.0.8 - member.php Cross-Site Scripting

OpenBB 1.0.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

OpenBB 1.0.8 - 'member.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

CVE-2004-1968

Open Bulletin Board (OpenBB) before version 1.0.6 contains a vulnerability in the readmsg action of myhome.php that allows remote attackers to read arbitrary messages by modifying the id parameter. The affected component is the readmsg functionality; underlying cause is improper validation of the...