Vulnerabilities > CVE-2004-1965 - Input Validation vulnerability in OpenBB
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |
Exploit-Db
description OpenBB 1.0.x post.php TID Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24054 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24054/ title OpenBB 1.0.x post.php TID Parameter XSS description OpenBB < 1.0.6 - Multiple Vulnerabilities. CVE-2004-1965. Webapps exploit for PHP platform id EDB-ID:43811 last seen 2018-01-24 modified 2004-04-24 published 2004-04-24 reporter Exploit-DB source https://www.exploit-db.com/download/43811/ title OpenBB < 1.0.6 - Multiple Vulnerabilities description OpenBB 1.0.x member.php redirect Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24052 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24052/ title OpenBB 1.0.x member.php redirect Parameter XSS description OpenBB 1.0.x index.php redirect Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24055 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24055/ title OpenBB 1.0.x index.php redirect Parameter XSS description OpenBB 1.0.x myhome.php to Parameter XSS. CVE-2004-1965. Webapps exploit for php platform id EDB-ID:24053 last seen 2016-02-02 modified 2004-04-26 published 2004-04-26 reporter JeiAr source https://www.exploit-db.com/download/24053/ title OpenBB 1.0.x myhome.php to Parameter XSS