Vulnerabilities > Flexbb

DATE CVE VULNERABILITY TITLE RISK
2008-01-09 CVE-2008-0157 SQL Injection vulnerability in Flexbb 1.010005Betarelease1
SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.
network
low complexity
flexbb CWE-89
7.5
2006-04-26 CVE-2006-2034 Input Validation vulnerability in Flexbb 0.5.5
SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php.
network
low complexity
flexbb
7.5
2006-04-21 CVE-2006-1978 SQL Injection vulnerability in Flexbb
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.
network
low complexity
flexbb CWE-89
7.5
2006-04-21 CVE-2006-1977 Cross-Site Scripting vulnerability in FlexBB
Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters.
network
flexbb
5.8
2006-04-18 CVE-2006-1811 Input Validation vulnerability in Flexbb 0.5.5Beta
Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Location, (12) Signature, and (13) Sub-Titles fields in the user profile; or (14) flexbb_password field in a cookie.
network
low complexity
flexbb
6.4
2006-04-18 CVE-2006-1810 HTML Injection vulnerability in Flexbb 0.5.5Beta
Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile.
local
flexbb
1.9