Filtered by vendor 427bb Subscriptions
Filtered by product Fourtwosevenbb Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-0155 1 427bb 1 Fourtwosevenbb 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI.
CVE-2006-0154 1 427bb 1 Fourtwosevenbb 2024-11-21 N/A
SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter.
CVE-2006-0153 1 427bb 1 Fourtwosevenbb 2024-11-21 N/A
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
CVE-2005-0629 1 427bb 1 Fourtwosevenbb 2024-11-20 N/A
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.