Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=108301983206107&w=2 | Mailing List |
| http://secunia.com/advisories/11481 | Broken Link Exploit Vendor Advisory |
| http://securitytracker.com/id?1009935 | Broken Link Exploit Third Party Advisory VDB Entry Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15967 | Third Party Advisory VDB Entry |
Configurations
History
08 Feb 2024, 20:46
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=108301983206107&w=2 - Mailing List | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/15967 - Third Party Advisory, VDB Entry | |
| References | (SECUNIA) http://secunia.com/advisories/11481 - Broken Link, Exploit, Vendor Advisory | |
| References | (SECTRACK) http://securitytracker.com/id?1009935 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory | |
| CPE | cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:* cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 8.8 |
Information
Published : 2004-04-25 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2004-1967
Mitre link : CVE-2004-1967
CVE.ORG link : CVE-2004-1967
JSON object : View
Products Affected
openbb
- openbb
CWE
CWE-352
Cross-Site Request Forgery (CSRF)