Skip to content
Noroxi

openbb records

12 published records for vendor openbb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    12 records
    • CVE-2004-1967
      35Monitor

      Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.ph

      HighCVSS 8.8No exploitEPSS 2%

      openbb · openbbApr 25, 2004

    • CVE-2002-0330
      32Monitor

      Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary scrip

      HighCVSS 7.5Proof of conceptEPSS 8%

      openbb · openbbJun 25, 2002

    • CVE-2006-4722
      31Monitor

      PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP c

      HighCVSS 7.5Proof of conceptEPSS 3%

      openbb · openbbSep 12, 2006

    • CVE-2005-1612
      31Monitor

      SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5Proof of conceptEPSS 2%

      openbb · openbbMay 16, 2005

    • CVE-2004-1969
      30Monitor

      The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by upload

      HighCVSS 7.5No exploitEPSS 2%

      openbb · openbbApr 25, 2004

    • CVE-2004-1966
      30Monitor

      Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL com

      HighCVSS 7.5Proof of conceptEPSS 1%

      openbb · openbbDec 31, 2004

    • CVE-2005-2566
      30Monitor

      Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1)

      HighCVSS 7.5No exploitEPSS 1%

      openbb · openbbAug 16, 2005

    • CVE-2005-1613
      28Monitor

      Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web

      MediumCVSS 6.8Proof of conceptEPSS 4%

      openbb · openbbMay 16, 2005

    • CVE-2002-1830
      22Monitor

      Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to

      MediumCVSS 5.0Proof of conceptEPSS 7%

      openbb · openbbDec 31, 2002

    • CVE-2004-1968
      21Monitor

      The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by mod

      MediumCVSS 5.0Proof of conceptEPSS 3%

      openbb · openbbApr 26, 2004

    • CVE-2004-1965
      20Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbi

      MediumCVSS 4.3Proof of conceptEPSS 9%

      openbb · openbbApr 25, 2004

    • CVE-2002-1829
      18Monitor

      Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitr

      MediumCVSS 4.3Proof of conceptEPSS 4%

      openbb · openbbDec 31, 2002