IDCVSSSummaryLast (major) updatePublished
CVE-2005-1200 7.5
PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the (1) dir_src or (2) abs_layer parameter to reference a URL on a remote
11-07-2017 - 01:32 02-05-2005 - 04:00
CVE-2005-1201 6.4
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated users with administrative privileges to delete arbitrary files via a .. (dot dot) in the URL to admin_avatar.php or admin_attachment
11-07-2017 - 01:32 02-05-2005 - 04:00
CVE-2006-0407 4.3
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the
19-10-2018 - 15:44 25-01-2006 - 02:03
Back to Top Mark selected
Back to Top