Flexbb - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2008-01-09.

Products

CVE-2008-0157 - CVSS 7.5 (high), 2008-01-09: SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.
CVE-2006-2034 - CVSS 7.5 (high), 2006-04-26: SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and…
CVE-2006-1978 - CVSS 7.5 (high), 2006-04-21: SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username…
CVE-2006-1977 - CVSS 5.8 (medium), 2006-04-21: Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and…
CVE-2006-1810 - CVSS 1.9 (low), 2006-04-18: Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2)…
CVE-2006-1811 - CVSS 6.4 (medium), 2006-04-18: Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3)…