Записи openbb
12 опубликованных записей вендора openbb.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 7
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
12 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
35Наблюдать | CVE-2004-1967Эксплойта нет | Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.phopenbb · openbb · CWE-352 | Высокая8,8 | — | 1,6 % | 25 апр. 2004 г. |
32Наблюдать | CVE-2002-0330Proof of concept | Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary scripopenbb · openbb | Высокая7,5 | — | 7,9 % | 25 июн. 2002 г. |
31Наблюдать | CVE-2006-4722Proof of concept | PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP copenbb · openbb | Высокая7,5 | — | 2,8 % | 12 сент. 2006 г. |
31Наблюдать | CVE-2005-1612Proof of concept | SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via openbb · openbb | Высокая7,5 | — | 2,2 % | 16 мая 2005 г. |
30Наблюдать | CVE-2004-1969Эксплойта нет | The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploadopenbb · openbb | Высокая7,5 | — | 1,5 % | 25 апр. 2004 г. |
30Наблюдать | CVE-2004-1966Proof of concept | Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL comopenbb · openbb | Высокая7,5 | — | 1,3 % | 31 дек. 2004 г. |
30Наблюдать | CVE-2005-2566Эксплойта нет | Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1) openbb · openbb | Высокая7,5 | — | 1,1 % | 16 авг. 2005 г. |
28Наблюдать | CVE-2005-1613Proof of concept | Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary webopenbb · openbb | Средняя6,8 | — | 3,7 % | 16 мая 2005 г. |
22Наблюдать | CVE-2002-1830Proof of concept | Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to openbb · openbb | Средняя5,0 | — | 7,1 % | 31 дек. 2002 г. |
21Наблюдать | CVE-2004-1968Proof of concept | The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modopenbb · openbb | Средняя5,0 | — | 2,9 % | 26 апр. 2004 г. |
20Наблюдать | CVE-2004-1965Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbiopenbb · openbb | Средняя4,3 | — | 9,0 % | 25 апр. 2004 г. |
18Наблюдать | CVE-2002-1829Proof of concept | Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitropenbb · openbb | Средняя4,3 | — | 3,6 % | 31 дек. 2002 г. |
- CVE-2004-196735Наблюдать
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.ph
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %openbb · openbb25 апр. 2004 г.
- CVE-2002-033032Наблюдать
Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary scrip
ВысокаяCVSS 7,5Proof of conceptEPSS 8 %openbb · openbb25 июн. 2002 г.
- CVE-2006-472231Наблюдать
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP c
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %openbb · openbb12 сент. 2006 г.
- CVE-2005-161231Наблюдать
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %openbb · openbb16 мая 2005 г.
- CVE-2004-196930Наблюдать
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by upload
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %openbb · openbb25 апр. 2004 г.
- CVE-2004-196630Наблюдать
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL com
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %openbb · openbb31 дек. 2004 г.
- CVE-2005-256630Наблюдать
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1)
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %openbb · openbb16 авг. 2005 г.
- CVE-2005-161328Наблюдать
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web
СредняяCVSS 6,8Proof of conceptEPSS 4 %openbb · openbb16 мая 2005 г.
- CVE-2002-183022Наблюдать
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to
СредняяCVSS 5,0Proof of conceptEPSS 7 %openbb · openbb31 дек. 2002 г.
- CVE-2004-196821Наблюдать
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by mod
СредняяCVSS 5,0Proof of conceptEPSS 3 %openbb · openbb26 апр. 2004 г.
- CVE-2004-196520Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbi
СредняяCVSS 4,3Proof of conceptEPSS 9 %openbb · openbb25 апр. 2004 г.
- CVE-2002-182918Наблюдать
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitr
СредняяCVSS 4,3Proof of conceptEPSS 4 %openbb · openbb31 дек. 2002 г.