Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=108301983206107&w=2 | |
http://secunia.com/advisories/11481 | Exploit Vendor Advisory |
http://securitytracker.com/id?1009935 | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/10214 | Exploit Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/15966 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-04-25 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2004-1965
Mitre link : CVE-2004-1965
CVE.ORG link : CVE-2004-1965
JSON object : View
Products Affected
openbb
- openbb
CWE