CVE-2004-1555
BroadBoard Instant ASP Message Board - SQL Injection via Search Keywords or Profile Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1555. PoCs published by pigrelax.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in BroadBoard Message Board, where user-supplied URI input is not properly sanitized before being used in SQL queries. The example URI demonstrates a potential attack vector but does not include executable exploit code.
Description
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in BroadBoard Message Board, where user-supplied URI input is not properly sanitized before being used in SQL queries. The example URI demonstrates a potential attack vector but does not include executable exploit code.
The provided text describes a SQL injection vulnerability in BroadBoard Message Board, where user-supplied input in the 'handle' parameter of 'profile.asp' is not properly sanitized. This allows an attacker to manipulate SQL queries, potentially leading to data exposure or corruption.