Filtered by vendor 427bb
Subscriptions
Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2006-0155 | 1 427bb | 1 Fourtwosevenbb | 2024-11-21 | N/A |
Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI. | ||||
CVE-2006-0154 | 1 427bb | 1 Fourtwosevenbb | 2024-11-21 | N/A |
SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter. | ||||
CVE-2006-0153 | 1 427bb | 1 Fourtwosevenbb | 2024-11-21 | N/A |
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie. | ||||
CVE-2005-0629 | 1 427bb | 1 Fourtwosevenbb | 2024-11-20 | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters. |
Page 1 of 1.