Vulnerabilities

TI-2006-01746 CVE-2006-1800 · GHSA-7x3w-gm8r-m55v

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows…

LOW 38

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02686 Published 2006-04-18 No fix listed

TI-2005-03890 CVE-2005-4135 · GHSA-ph4x-78w5-h79j

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and…

MEDIUM 44

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parame…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08619 Published 2005-12-09 No fix listed

TI-2005-03817 CVE-2005-4027 · GHSA-v9qq-wx6r-3q6x

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary…

LOW 35

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01198 Published 2005-12-05 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows…

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and…

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary…