Search
Find a vulnerability
Search criteria
8 vulnerabilities found for versatilebulletinboard by versatilebulletinboard
CVE-2003-1258 (GCVE-0-2003-1258)
Vulnerability from cvelistv5 – Published: 2005-11-16 07:37 – Updated: 2024-09-17 01:31
VLAI
EPSS
VEX
Summary
activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.iss.net/security_center/static/11044.php | vdb-entryx_refsource_XF |
| http://archives.neohapsis.com/archives/vulnwatch/… | mailing-listx_refsource_VULNWATCH |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T02:19:46.056Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "vbb-unauthorized-privileges(11044)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-11-16T07:37:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "vbb-unauthorized-privileges(11044)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-1258",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "vbb-unauthorized-privileges(11044)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"refsource": "VULNWATCH",
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-1258",
"datePublished": "2005-11-16T07:37:00.000Z",
"dateReserved": "2005-11-16T00:00:00.000Z",
"dateUpdated": "2024-09-17T01:31:52.016Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3260 (GCVE-0-2005-3260)
Vulnerability from cvelistv5 – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19971 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19970 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/19969 | vdb-entryx_refsource_OSVDB |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/15073 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.272Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19971",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19969"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19971",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19969"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3260",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19971",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19969"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3260",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.272Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3261 (GCVE-0-2005-3261)
Vulnerability from cvelistv5 – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19973 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/15075 | vdb-entryx_refsource_BID |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.366Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19973",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19973",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3261",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19973",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3261",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3259 (GCVE-0-2005-3259)
Vulnerability from cvelistv5 – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19962 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/15068 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/19963 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19966 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19964 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/19968 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19967 | vdb-entryx_refsource_OSVDB |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/19965 | vdb-entryx_refsource_OSVDB |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.137Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19962",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19967"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19965"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) \"search this thread\" feature, (3) \"search for posts\" feature, (4) \"forgot password\" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19962",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19967"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19965"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3259",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) \"search this thread\" feature, (3) \"search for posts\" feature, (4) \"forgot password\" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19962",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19967"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19965"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3259",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.137Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3260 (GCVE-0-2005-3260)
Vulnerability from nvd – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19971 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19970 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/19969 | vdb-entryx_refsource_OSVDB |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://www.securityfocus.com/bid/15073 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.272Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19971",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19969"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19971",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19969"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3260",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php and (2) the file parameter in imagewin.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19971",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19971"
},
{
"name": "19970",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19970"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19969",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19969"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "15073",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15073"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3260",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.272Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3261 (GCVE-0-2005-3261)
Vulnerability from nvd – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19973 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/15075 | vdb-entryx_refsource_BID |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.366Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19973",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19973",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3261",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19973",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19973"
},
{
"name": "15075",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15075"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3261",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-3259 (GCVE-0-2005-3259)
Vulnerability from nvd – Published: 2005-10-20 04:00 – Updated: 2024-08-07 23:01
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/19962 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/15068 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/19963 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19966 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19964 | vdb-entryx_refsource_OSVDB |
| http://marc.info/?l=bugtraq&m=112907535528616&w=2 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/19968 | vdb-entryx_refsource_OSVDB |
| http://www.osvdb.org/19967 | vdb-entryx_refsource_OSVDB |
| http://rgod.altervista.org/versatile100RC2.html | x_refsource_MISC |
| http://secunia.com/advisories/17174/ | third-party-advisoryx_refsource_SECUNIA |
| http://www.osvdb.org/19965 | vdb-entryx_refsource_OSVDB |
Date Public
2005-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:01:59.137Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19962",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19967"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/19965"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) \"search this thread\" feature, (3) \"search for posts\" feature, (4) \"forgot password\" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19962",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19967"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/19965"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3259",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) \"search this thread\" feature, (3) \"search for posts\" feature, (4) \"forgot password\" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19962",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19962"
},
{
"name": "15068",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15068"
},
{
"name": "19963",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19963"
},
{
"name": "19966",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19966"
},
{
"name": "19964",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19964"
},
{
"name": "20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=112907535528616\u0026w=2"
},
{
"name": "19968",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19968"
},
{
"name": "19967",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19967"
},
{
"name": "http://rgod.altervista.org/versatile100RC2.html",
"refsource": "MISC",
"url": "http://rgod.altervista.org/versatile100RC2.html"
},
{
"name": "17174",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/17174/"
},
{
"name": "19965",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/19965"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3259",
"datePublished": "2005-10-20T04:00:00.000Z",
"dateReserved": "2005-10-20T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:01:59.137Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2003-1258 (GCVE-0-2003-1258)
Vulnerability from nvd – Published: 2005-11-16 07:37 – Updated: 2024-09-17 01:31
VLAI
EPSS
VEX
Summary
activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| http://www.iss.net/security_center/static/11044.php | vdb-entryx_refsource_XF |
| http://archives.neohapsis.com/archives/vulnwatch/… | mailing-listx_refsource_VULNWATCH |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T02:19:46.056Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "vbb-unauthorized-privileges(11044)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2005-11-16T07:37:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "vbb-unauthorized-privileges(11044)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"tags": [
"mailing-list",
"x_refsource_VULNWATCH"
],
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-1258",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "activate.php in versatileBulletinBoard (vBB) 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "vbb-unauthorized-privileges(11044)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/11044.php"
},
{
"name": "20030110 vulnerability in versatile BulletinBoard Allows Gaining Administrative Privileges.",
"refsource": "VULNWATCH",
"url": "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0017.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-1258",
"datePublished": "2005-11-16T07:37:00.000Z",
"dateReserved": "2005-11-16T00:00:00.000Z",
"dateUpdated": "2024-09-17T01:31:52.016Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}