Vulnerabilities

TI-2008-01945 CVE-2008-2023 · GHSA-57hw-9ccm-w3ch

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel.asp and the (3) atta…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-04-30 No fix listed CWE-89

TI-2008-01944 CVE-2008-2022 · GHSA-6xvq-x47h-8rxm

Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow…

LOW 26

Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) toid parameter to send-private-message.asp and the (2) redirect p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03467 Published 2008-04-30 No fix listed CWE-79

TI-2008-00411 CVE-2008-0436 · GHSA-26jv-hqqq-fm6j

Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software…

LOW 23

Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote attackers to inject arbitrary web script or HTML via the target parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2008-01-23 No fix listed CWE-79

TI-2006-00132 CVE-2006-0139 · GHSA-r59m-f8p8-w8qm

The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS…

LOW 26

The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0178 Published 2006-01-09 No fix listed

TI-2004-02523 CVE-2004-2653 · GHSA-xj5p-xp2f-36x3

Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain…

LOW 35

Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01116 Published 2006-01-09 No fix listed

TI-2004-02018 CVE-2004-2146 · GHSA-26ww-4j8h-6752

CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to…

LOW 25

CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01252 Published 2005-07-01 No fix listed

TI-2004-02017 CVE-2004-2145 · GHSA-mfr9-w3c9-m84j

SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to…

LOW 36

SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid pa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01316 Published 2005-07-01 No fix listed