Vulnerability in Openbb
CVE-2004-1965
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
EPSS: 0.090 (94.7th percentile) — read the EPSS interpretation.
Affected products
- Openbb — versions 1.0.0_beta1, 1.0.0_rc1, 1.0.0_rc2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
Frequently asked questions
- What is CVE-2004-1965?
- CVE-2004-1965 is a vulnerability in Openbb. Published 2004-04-25.
- Is CVE-2004-1965 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.