CVE-2004-1555

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.88% chance of exploitation in the next 30 days, 79th percentile

Published

2005-02-20

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24626
• https://www.exploit-db.com/exploits/24625

Security advisories

• http://secunia.com/advisories/12658
• http://www.securityfocus.com/bid/11250

References

• CVE Record
• NVD entry