6kbbs

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

6kbbs records in CISA KEV

No 6kbbs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

6kbbs 3 records LOW

Records

3 records in 6kbbs · all components

TI-2015-07669 CVE-2015-9292 · GHSA-www2-x2jr-73pc

6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).

LOW 39

6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-08-08 No fix listed CWE-352

TI-2010-04535 CVE-2010-4812 · GHSA-rwvf-hg32-j97c

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers…

LOW 31

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0095 Published 2011-07-08 No fix listed CWE-89

TI-2010-04534 CVE-2010-4811 · GHSA-jrjx-qcx7-3rxj

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone]…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-07-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0