CVE-2004-1965
CVE-2004-1965
Vexday Risk Score
38Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 8.4%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
24 Apr 2004Public PoC
10 May 2005Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
Affected products
n/a · n/apublic PoCs found — 5
exploitdbwww.exploit-db.com/exploits/24055unverifiedexploitdbwww.exploit-db.com/exploits/24052unverifiedexploitdbwww.exploit-db.com/exploits/24053unverifiedexploitdbwww.exploit-db.com/exploits/24054unverifiedexploitdbwww.exploit-db.com/exploits/43811unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.