vulnwire
7.5high

CVE-2004-19664 exploits

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL co…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.3%
percentile 71%
Public exploits
4
Exploit-DB

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.

Exploit prediction (EPSS)

1.34% probability of exploitation in the next 30 days, higher than 71% of all scored CVEs.

Exploits and detections

  • EDB-24059 OpenBB 1.0.x - 'post.php' Multiple SQL Injections · webapps · 2004-04-26
  • EDB-24058 OpenBB 1.0.x - 'search.php?q' SQL Injection · webapps · 2004-04-26
  • EDB-24057 OpenBB 1.0.x - 'member.php' Multiple SQL Injections · webapps · 2004-04-26
  • EDB-24056 OpenBB 1.0.x - 'board.php?FID' SQL Injection · webapps · 2004-04-26

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/15964 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/10214 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=bugtraq&m=108301983206107&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/11481 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1009935 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.