CVE-2008-2023

CVE-2008-2023 affects PD9 Software MegaBBS 2.2. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) invisible and (2) timeoffset in profile/controlpanel.asp, and (3) attachmentid in forums/attach-file.as...

CVE-2004-2653

The CVE describes an unspecified privilege-escalation vulnerability in PD9 Software MegaBBS 2.0 and 2.1. Affected component: MegaBBS web admin interfaces under admin/userlevelmembers-edit.asp and admin/edit-groups.asp. Root cause and exact exploit details are not provided in the documents, only t...

CVE-2004-2146

CVE-2004-2146 describes a CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1. The issue allows HTTP response splitting through the fid parameter in the writenew action to thread-post.asp, indicating that unsanitized input leads to header manipulation. Affected software: MegaBBS 2 and ...

CVE-2006-0139

The CVE-2006-0139 vulnerability affects PD9 Software MegaBBS 2.1 , specifically the send-private-message.asp feature. A remote attacker can read other users’ private messages by supplying a modified replyid parameter, indicating improper input handling/validation for that field. The available doc...

CVE-2004-2145

CVE-2004-2145 is a SQL injection vulnerability affecting PD9 Software MegaBBS 2 and 2.1. The flaw allows remote attackers to inject arbitrary SQL through parameters: sortdir or criteria to ladder-log.asp, and memberid or teamid to view-profile.asp. Root cause is improper handling of user-supplied...

CVE-2008-0436

CVE-2008-0436 refers to a cross-site scripting (XSS) vulnerability in PD9 Software MegaBBS 1.5.14b. The flaw resides in the profile-upload/upload.asp endpoint, exploitable via the target parameter to inject arbitrary web script or HTML. NVD indicates the attack could be remote and non-authenticat...

CVE-2008-2022

The CVE-2008-2022 entry describes multiple XSS vulnerabilities in PD9 Software MegaBBS 2.2. Affected component paths include send-private-message.asp (via the toid parameter) and admin/impersonate.asp (via the redirect parameter); the second vector requires authentication. The vulnerabilities all...