Vulnerabilities

TI-2014-07758 CVE-2014-9561 · GHSA-3pfx-7985-7wqj

Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3…

LOW 24

Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the post parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01936 Published 2015-01-15 No fix listed CWE-79

TI-2014-07757 CVE-2014-9560 · GHSA-943w-2h4r-hrm7

SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote…

LOW 37

SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02164 Published 2015-01-15 No fix listed CWE-89

TI-2006-04479 CVE-2006-4633 · GHSA-58j6-hw2w-38x5

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the…

LOW 29

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page[] parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03546 Published 2006-09-08 No fix listed

TI-2006-04478 CVE-2006-4632 · GHSA-ww2q-9hm3-8gpg

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote…

MEDIUM 40

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.ph…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04101 Published 2006-09-08 No fix listed

TI-2006-04477 CVE-2006-4631 · GHSA-6gch-w3fh-j525

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and…

LOW 34

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0308 Published 2006-09-08 No fix listed

TI-2006-04439 CVE-2006-4593 · GHSA-qrjq-gjcr-v9fp

Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows…

LOW 34

Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01953 Published 2006-09-06 No fix listed

TI-2006-01281 CVE-2006-1327 · GHSA-cr77-qqpm-8qcr

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute…

LOW 36

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01517 Published 2006-03-21 No fix listed