CVE-2004-2177

CVE-2004-2177 affects DevoyBB Web Forum 1.0.0. Multiple sources (NVD, Red Hat, CVE list, OpenVAS NT/NESSUS) describe a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. OpenVAS notes additional vulnerability vectors (...

CVE-2004-2178

CVE-2004-2178 : SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The affected software is a PHP-based web forum. The impact is described as arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH) . No spec...