Search
Find a vulnerability
Search criteria
2 vulnerabilities found for yabb_se by yabb
CVE-2004-2754 (GCVE-0-2004-2754)
Vulnerability from cvelistv5 – Published: 2007-11-15 23:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/350244 | mailing-listx_refsource_BUGTRAQ |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_MISC |
| http://www.osvdb.org/3618 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/9449 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/3371 | third-party-advisoryx_refsource_SREASON |
| http://www.securitytracker.com/id?1008764 | vdb-entryx_refsource_SECTRACK |
| http://www.yabbse.org/community/index.php?thread=27122 | x_refsource_MISC |
Date Public
2004-01-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:25.252Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20040119 Yabb SE SQL Injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1008764"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-11-28T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20040119 Yabb SE SQL Injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1008764"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2754",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20040119 Yabb SE SQL Injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105",
"refsource": "MISC",
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1008764"
},
{
"name": "http://www.yabbse.org/community/index.php?thread=27122",
"refsource": "MISC",
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2754",
"datePublished": "2007-11-15T23:00:00.000Z",
"dateReserved": "2007-11-15T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:25.252Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2754 (GCVE-0-2004-2754)
Vulnerability from nvd – Published: 2007-11-15 23:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/350244 | mailing-listx_refsource_BUGTRAQ |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_MISC |
| http://www.osvdb.org/3618 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/bid/9449 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/3371 | third-party-advisoryx_refsource_SREASON |
| http://www.securitytracker.com/id?1008764 | vdb-entryx_refsource_SECTRACK |
| http://www.yabbse.org/community/index.php?thread=27122 | x_refsource_MISC |
Date Public
2004-01-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:25.252Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20040119 Yabb SE SQL Injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1008764"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-01-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2007-11-28T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20040119 Yabb SE SQL Injection",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1008764"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2754",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20040119 Yabb SE SQL Injection",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/350244"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105",
"refsource": "MISC",
"url": "http://sourceforge.net/project/shownotes.php?release_id=210608\u0026group_id=57105"
},
{
"name": "3618",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/3618"
},
{
"name": "9449",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/9449"
},
{
"name": "3371",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/3371"
},
{
"name": "1008764",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1008764"
},
{
"name": "http://www.yabbse.org/community/index.php?thread=27122",
"refsource": "MISC",
"url": "http://www.yabbse.org/community/index.php?thread=27122"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2754",
"datePublished": "2007-11-15T23:00:00.000Z",
"dateReserved": "2007-11-15T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:25.252Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}