CVE-2004-1965
NUCLEIOpen Bulletin Board <= 1.0.6 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2004-1965. PoCs published by JeiAr, GulfTech Security. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in OpenBB due to improper input sanitization. It includes a sample XSS payload but lacks executable exploit code.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
Exploits (5)
The provided text describes SQL injection and XSS vulnerabilities in OpenBB due to improper input sanitization. It includes a sample XSS payload but lacks executable exploit code.
This is a vulnerability writeup describing SQL injection and XSS vulnerabilities in OpenBB. It provides a high-level overview of the issues but does not include functional exploit code.
This is a vulnerability writeup describing SQL injection and XSS vulnerabilities in OpenBB. It provides details on the issues but does not include functional exploit code.
This is a vulnerability writeup describing SQL injection and XSS vulnerabilities in OpenBB. It does not contain exploit code but provides technical details and example attack vectors.
This is a detailed vulnerability writeup for CVE-2004-1965, describing multiple issues in OpenBB <= 1.0.6, including XSS, SQL injection, and arbitrary command execution via unsafe GET requests. It provides examples of vulnerable endpoints and code snippets but does not include executable exploit code.