Vulnerabilities

TI-2007-03482 CVE-2007-3590 · GHSA-c3jq-8mx5-pwh7

Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows…

LOW 26

Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrary web script or HTML via the user parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03204 Published 2007-07-05 No fix listed

TI-2007-03481 CVE-2007-3589 · GHSA-39w4-7w4p-hfw4

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showthread.php or (2) showboard.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01041 Published 2007-07-05 No fix listed

TI-2007-03295 CVE-2007-3401 · GHSA-6cr9-7cfm-4prq

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote…

HIGH 71

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.73961 Published 2007-06-26 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows…

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute…

PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote…