CVE-2004-1965

Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

9.00% chance of exploitation in the next 30 days, 95th percentile

Nuclei

medium

Published

2005-05-10

Updated

2024-08-08

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-1965.yaml

ExploitDB entries (5)

• https://www.exploit-db.com/exploits/24055
• https://www.exploit-db.com/exploits/24054
• https://www.exploit-db.com/exploits/24053
• https://www.exploit-db.com/exploits/24052
• https://www.exploit-db.com/exploits/43811

References

• CVE Record
• NVD entry

Related

• CVE-2004-1962
• CVE-2004-1966
• CVE-2004-1961
• CVE-2004-1968
• CVE-2004-1960
• CVE-2004-1972