{"api_version":"1","generated_at":"2026-07-23T09:36:53+00:00","cve":"CVE-2004-1555","urls":{"html":"https://cve.report/CVE-2004-1555","api":"https://cve.report/api/cve/CVE-2004-1555.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-1555","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-1555"},"summary":{"title":"CVE-2004-1555","description":"Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2","name":"http://marc.info/?l=bugtraq&m=109630777608244&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'SQL injection in BroadBoard Instant ASP Message Board' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/12658","name":"http://secunia.com/advisories/12658","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - BroadBoard Instant ASP Message Board SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1011419","name":"http://securitytracker.com/id?1011419","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Broadboard Input Validation Holes Let Remote Users Inject SQL Commands","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/11250","name":"http://www.securityfocus.com/bid/11250","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"BroadBoard Message Board Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1555","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1555","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"1555","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadboard_instant","cpe5":"asp_message_board","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T00:53:24.108Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1011419","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1011419"},{"name":"broadboard-forgotasp-sql-injection(17502)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502"},{"name":"broadboard-profileasp-sql-injection(17500)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500"},{"name":"broadboard-searchasp-sql-injection(17498)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498"},{"name":"20040926 SQL injection in BroadBoard Instant ASP Message Board","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2"},{"name":"11250","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/11250"},{"name":"12658","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/12658"},{"name":"broadboard-reg2asp-sql-injection(17501)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-09-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1011419","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1011419"},{"name":"broadboard-forgotasp-sql-injection(17502)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502"},{"name":"broadboard-profileasp-sql-injection(17500)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500"},{"name":"broadboard-searchasp-sql-injection(17498)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498"},{"name":"20040926 SQL injection in BroadBoard Instant ASP Message Board","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2"},{"name":"11250","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/11250"},{"name":"12658","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/12658"},{"name":"broadboard-reg2asp-sql-injection(17501)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-1555","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1011419","refsource":"SECTRACK","url":"http://securitytracker.com/id?1011419"},{"name":"broadboard-forgotasp-sql-injection(17502)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502"},{"name":"broadboard-profileasp-sql-injection(17500)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500"},{"name":"broadboard-searchasp-sql-injection(17498)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498"},{"name":"20040926 SQL injection in BroadBoard Instant ASP Message Board","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2"},{"name":"11250","refsource":"BID","url":"http://www.securityfocus.com/bid/11250"},{"name":"12658","refsource":"SECUNIA","url":"http://secunia.com/advisories/12658"},{"name":"broadboard-reg2asp-sql-injection(17501)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-1555","datePublished":"2005-02-20T05:00:00.000Z","dateReserved":"2005-02-20T00:00:00.000Z","dateUpdated":"2024-08-08T00:53:24.108Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadboard_instant:asp_message_board:*:*:*:*:*:*:*:*","matchCriteriaId":"A4CE4847-113C-4577-AD94-54D7E441154A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"1555","Ordinal":"1","Title":"CVE-2004-1555","CVE":"CVE-2004-1555","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"1555","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp.","Type":"Description","Title":"CVE-2004-1555"},{"CveYear":"2004","CveId":"1555","Ordinal":"2","NoteData":"2005-02-20","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"1555","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}