PatchTheCVEopenbb vulnerabilities and fixes
Recent CVEs affecting openbb, with upgrade or downgrade steps. 10 tracked.
openbb has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-09-12. Highest priority: CVE-2004-1967 (score 55/100).
- CVE-2006-4722 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attack
- CVE-2005-2566 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbit
- CVE-2005-1613 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote att
- CVE-2005-1612 HIGH 7.5 DOWNGRADE SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execu
- CVE-2004-1968 MEDIUM 5.0 DOWNGRADE The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to
- CVE-2004-1967 HIGH 8.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.ph
- CVE-2004-1966 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attacker
- CVE-2002-1830 MEDIUM 5.0 DOWNGRADE Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier op
- CVE-2002-1829 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows rem
- CVE-2002-0330 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attack
FAQ
How do I fix openbb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openbb being exploited right now?
None of the tracked openbb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openbb CVE should I patch first?
CVE-2004-1967 currently ranks highest (55/100): Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.ph.