Vulnerabilities

TI-2009-00811 CVE-2009-0853 · GHSA-63q6-wgcf-8ppf

login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to…

LOW 35

login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an adm…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02364 Published 2009-03-09 No fix listed CWE-287

TI-2009-00810 CVE-2009-0852 · GHSA-4443-73qg-vxgj

showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

LOW 28

showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02683 Published 2009-03-09 No fix listed CWE-200

TI-2009-00809 CVE-2009-0851 · GHSA-699h-75ph-9vh2

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is…

LOW 32

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewforum.php and (2) viewtopic.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01066 Published 2009-03-09 No fix listed CWE-89

Vulnerabilities

Filters

login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to…

showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is…