CVE-2004-1555 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.9% (pctl 79)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.88% — more likely to be exploited than 79% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-12-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| broadboard instant | asp message board |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | FreezingCold Broadboard - 'search.asp' SQL Injection | 2004-09-27 |
| exploit-db | FreezingCold Broadboard - 'profile.asp' SQL Injection | 2004-09-27 |
References
- http://marc.info/?l=bugtraq&m=109630777608244&w=2
- http://secunia.com/advisories/12658
- http://securitytracker.com/id?1011419
- http://www.securityfocus.com/bid/11250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17502
- http://marc.info/?l=bugtraq&m=109630777608244&w=2
- http://secunia.com/advisories/12658
- http://securitytracker.com/id?1011419
- http://www.securityfocus.com/bid/11250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17502
→ the Explorer · watch your stack · NVD