CVE

Id
9983  
CVE No.
CVE-2004-1555  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68331 9983 CVE-2004-1555 BUGTRAQ:20040926 SQL injection in BroadBoard Instant ASP Message Board  View
68332 9983 CVE-2004-1555 URL:http://marc.info/?l=bugtraq&m=109630777608244&w=2  View
68333 9983 CVE-2004-1555 BID:11250  View
68334 9983 CVE-2004-1555 URL:http://www.securityfocus.com/bid/11250  View
68335 9983 CVE-2004-1555 SECTRACK:1011419  View
68336 9983 CVE-2004-1555 URL:http://securitytracker.com/id?1011419  View
68337 9983 CVE-2004-1555 SECUNIA:12658  View
68338 9983 CVE-2004-1555 URL:http://secunia.com/advisories/12658  View
68339 9983 CVE-2004-1555 XF:broadboard-forgotasp-sql-injection(17502)  View
68340 9983 CVE-2004-1555 URL:http://xforce.iss.net/xforce/xfdb/17502  View
68341 9983 CVE-2004-1555 XF:broadboard-profileasp-sql-injection(17500)  View
68342 9983 CVE-2004-1555 URL:http://xforce.iss.net/xforce/xfdb/17500  View
68343 9983 CVE-2004-1555 XF:broadboard-reg2asp-sql-injection(17501)  View
68344 9983 CVE-2004-1555 URL:http://xforce.iss.net/xforce/xfdb/17501  View
68345 9983 CVE-2004-1555 XF:broadboard-searchasp-sql-injection(17498)  View

Related JVN