Skip to content
Noroxi

pd9 software records

7 published records for vendor pd9 software.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2004-2145
      30Monitor

      SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir

      HighCVSS 7.5No exploitEPSS 1%

      pd9 software · megabbsDec 31, 2004

    • CVE-2004-2653
      30Monitor

      Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/us

      HighCVSS 7.5No exploitEPSS 1%

      pd9 software · megabbsDec 31, 2004

    • CVE-2008-2023
      30Monitor

      Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invi

      HighCVSS 7.5Proof of conceptEPSS 1%

      pd9 software · megabbsApr 30, 2008

    • CVE-2006-0139
      21Monitor

      The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messag

      MediumCVSS 5.0No exploitEPSS 1%

      pd9 software · megabbsJan 9, 2006

    • CVE-2004-2146
      20Monitor

      CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid param

      MediumCVSS 5.0No exploitEPSS 1%

      pd9 software · megabbsDec 31, 2004

    • CVE-2008-2022
      18Monitor

      Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HT

      MediumCVSS 4.3Proof of conceptEPSS 3%

      pd9 software · megabbsApr 30, 2008

    • CVE-2008-0436
      17Monitor

      Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbi

      MediumCVSS 4.3Proof of conceptEPSS 1%

      pd9 software · megabbsJan 23, 2008