openbb openbb vulnerabilities and exploits

(subscribe to this query)

NA

PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php.

Openbb Openbb 1.0.0 Beta1 Openbb Openbb 1.0.0 Rc1 Openbb Openbb 1.0.0 Rc2 Openbb Openbb 1.0.0 Rc3 Openbb Openbb 1.0.5 Openbb Openbb 1.0.6 Openbb Openbb

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter i...

Openbb Openbb 1.0.0 Beta1 Openbb Openbb 1.0.6 Openbb Openbb 1.0.8 Openbb Openbb 1.0.0 Rc1 Openbb Openbb 1.0.0 Rc2 Openbb Openbb 1.0.0 Rc3 Openbb Openbb 1.0.5

4 EDB exploits

NA

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and previous versions allows remote malicious users to read arbitrary messages by modifying the id parameter.

Openbb Openbb 1.0 .0 Rc1 Openbb Openbb 1.0 .0 Rc2 Openbb Openbb 1.0 .0 Beta1 Openbb Openbb 1.0 .0 Rc3 Openbb Openbb 1.0 .5 Openbb Openbb 1.0 .6

1 EDB exploit

NA

Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote malicious users to execute arbitrary script and steal cookies via Javascript in the IMG tag.

Openbb Openbb 1.0.0 Beta1 Openbb Openbb 1.0.0 Rc1 Openbb Openbb 1.0.0 Rc2

2 EDB exploits

NA

Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote malicious users to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters.

Openbb Openbb 1.0.0 Rc1 Openbb Openbb 1.0.0 Rc2 Openbb Openbb 1.0.0 Rc3

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote malicious users to execute arbitrary SQL commands via the (1) FID parameter to board.php or (2) UID parameter to member.php.

Openbb Openbb

NA

Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote malicious users to inject arbitrary web script or HTML via the reverse parameter in a list action.

Openbb Openbb 1.0.8

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote malicious users to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag.

Openbb Openbb 1.0.0 Rc3

1 EDB exploit

NA

SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote malicious users to execute arbitrary SQL commands via the TID parameter.

Openbb Openbb 1.0.8

1 EDB exploit

8.8

CVSSv3

Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and previous versions allow remote malicious users to execute arbitrary code b...

Openbb Openbb 1.0.6

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook