CVE-2004-1966
OpenBB <= 1.0.6 - SQL Injection via FID Parameter in board.php
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2004-1966. PoCs published by JeiAr.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in OpenBB due to improper input sanitization. It outlines potential impacts such as unauthorized data access or execution of malicious scripts in a victim's browser.
Description
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.
Exploits (4)
The provided text describes SQL injection and XSS vulnerabilities in OpenBB due to improper input sanitization. It outlines potential impacts such as unauthorized data access or execution of malicious scripts in a victim's browser.
The provided text describes SQL injection and XSS vulnerabilities in OpenBB, detailing potential attack vectors via manipulated URIs. It does not contain executable exploit code but references known vulnerabilities.
The provided text describes SQL injection and XSS vulnerabilities in OpenBB, detailing affected parameters and potential impacts. It does not contain executable exploit code but serves as a vulnerability advisory.
The provided text describes SQL injection and XSS vulnerabilities in OpenBB due to improper input sanitization. It outlines potential impacts such as unauthorized data access or execution of malicious scripts in a user's browser.