{"api_version":"1","generated_at":"2026-07-23T02:17:48+00:00","cve":"CVE-2004-1966","urls":{"html":"https://cve.report/CVE-2004-1966","api":"https://cve.report/api/cve/CVE-2004-1966.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2004-1966","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2004-1966"},"summary":{"title":"CVE-2004-1966","description":"Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-12-31 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1009935","name":"http://securitytracker.com/id?1009935","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - OpenBB Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/11481","name":"http://secunia.com/advisories/11481","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Secunia - Advisories - OpenBB Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/10214","name":"http://www.securityfocus.com/bid/10214","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"OpenBB Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","name":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Multiple Vulnerabilities In OpenBB' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1966","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1966","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.0_beta1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.0_rc1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.0_rc2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.0_rc3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2004","cve_id":"1966","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openbb","cpe5":"openbb","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T01:07:49.173Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"openbb-multiplescripts-sql-injection(15964)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964"},{"name":"10214","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/10214"},{"name":"20040425 Multiple Vulnerabilities In OpenBB","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2"},{"name":"11481","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/11481"},{"name":"1009935","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1009935"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-04-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"openbb-multiplescripts-sql-injection(15964)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964"},{"name":"10214","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/10214"},{"name":"20040425 Multiple Vulnerabilities In OpenBB","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2"},{"name":"11481","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/11481"},{"name":"1009935","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1009935"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2004-1966","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"openbb-multiplescripts-sql-injection(15964)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964"},{"name":"10214","refsource":"BID","url":"http://www.securityfocus.com/bid/10214"},{"name":"20040425 Multiple Vulnerabilities In OpenBB","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2"},{"name":"11481","refsource":"SECUNIA","url":"http://secunia.com/advisories/11481"},{"name":"1009935","refsource":"SECTRACK","url":"http://securitytracker.com/id?1009935"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2004-1966","datePublished":"2005-05-10T04:00:00.000Z","dateReserved":"2005-05-04T00:00:00.000Z","dateUpdated":"2024-08-08T01:07:49.173Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-12-31 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D0E8D8D0-D96F-411D-8611-3381C576AE1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F50BB6B-34DD-4AA4-9361-7EF4FFB07122"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"265F9C9B-388B-49EE-9655-D9AB93B91A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7701BCD0-C552-4BCC-87DA-CF48B3FBD2A6"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2004","CveId":"1966","Ordinal":"1","Title":"CVE-2004-1966","CVE":"CVE-2004-1966","Year":"2004"},"notes":[{"CveYear":"2004","CveId":"1966","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.","Type":"Description","Title":"CVE-2004-1966"},{"CveYear":"2004","CveId":"1966","Ordinal":"2","NoteData":"2005-05-10","Type":"Other","Title":"Published"},{"CveYear":"2004","CveId":"1966","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}