Vulnerabilities

TI-2015-07669 CVE-2015-9292 · GHSA-www2-x2jr-73pc

6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).

LOW 39

6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-08-08 No fix listed CWE-352

TI-2010-04535 CVE-2010-4812 · GHSA-rwvf-hg32-j97c

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers…

LOW 31

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0095 Published 2011-07-08 No fix listed CWE-89

TI-2010-04534 CVE-2010-4811 · GHSA-jrjx-qcx7-3rxj

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone]…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-07-08 No fix listed CWE-79

Vulnerabilities

Filters

6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).

Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build…